Behavioral task
behavioral1
Sample
d58ce8fe8c74893e907d5c0d54bebbd4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d58ce8fe8c74893e907d5c0d54bebbd4.exe
Resource
win10v2004-20231215-en
General
-
Target
d58ce8fe8c74893e907d5c0d54bebbd4
-
Size
10.2MB
-
MD5
d58ce8fe8c74893e907d5c0d54bebbd4
-
SHA1
b19cf5810de91fe0cc369b6f7de3a88cb76fc103
-
SHA256
be08fe16221642ff97df784dce0de5a24be51279357a657f59a5e55aeb9d267f
-
SHA512
c19af7110b5cdc6ffb31a7578d94026eabe208124b864dfe27cf75b0e2dd10f3aeb899e0f05f0b9a5205ae3efb58fb43b41cdeb9a36661a658dd6aa153baea9a
-
SSDEEP
98304:ooQaBkDORozd3KYLHvh2cwF17NbD3WmAzBXdwO8dbC3KYLHvh2cwF17NbD3:oqyCiDrrwF1JO9zBX+hdCrrwF1J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58ce8fe8c74893e907d5c0d54bebbd4
Files
-
d58ce8fe8c74893e907d5c0d54bebbd4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE