Behavioral task
behavioral1
Sample
d666b3876663e8140f1abb92195cb36b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d666b3876663e8140f1abb92195cb36b.exe
Resource
win10v2004-20231215-en
General
-
Target
d666b3876663e8140f1abb92195cb36b
-
Size
133KB
-
MD5
d666b3876663e8140f1abb92195cb36b
-
SHA1
b1abc67177a58ede7e2ffa4c2c6fffc0c32e7efa
-
SHA256
178812c50ecfaed9c44f576a5dc3ba5887c4ba66a5610fc72057ba6b5d0b3375
-
SHA512
e466917807617ca00a89bedcdf759ced97ce35d794146f6277c813af0d4013038cdfd42168bd7aa9cc445ca26166c4eb42d9672b7b835d6661c770491fd0caf2
-
SSDEEP
3072:m/h+mXJUgP3IHqEF6juAcwKGNIZVHcO7WukTEAG28pyw1jVQ:ch/5T3IHj6ju1w4xCJElyw1jVQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d666b3876663e8140f1abb92195cb36b
Files
-
d666b3876663e8140f1abb92195cb36b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE