Behavioral task
behavioral1
Sample
da0758d1fb5ea2cc92e930dd60838b4a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
da0758d1fb5ea2cc92e930dd60838b4a.exe
Resource
win10v2004-20231215-en
General
-
Target
da0758d1fb5ea2cc92e930dd60838b4a
-
Size
99KB
-
MD5
da0758d1fb5ea2cc92e930dd60838b4a
-
SHA1
350a9b191ceb4899f871a69730ec68380eb4c872
-
SHA256
59e1de96be8169aaa93261725f86eca483cf295f5cd2d0a38911d62fb353341c
-
SHA512
3098581f66590542633687c384c2dc937e78512762ad6d65f64f636ac4b12aa03ae3455e272e8a81bd22cb7e1304c6536199f5a515e264df919654cb7f681155
-
SSDEEP
3072:sr3KcWmjRrzSygLodVa6S/kzeUUOslur5YyLDK:/vEPS/kz9Ukr5TLG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da0758d1fb5ea2cc92e930dd60838b4a
Files
-
da0758d1fb5ea2cc92e930dd60838b4a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE