Behavioral task
behavioral1
Sample
01dd5fbc93fa93e864010d54a8d170d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01dd5fbc93fa93e864010d54a8d170d8.exe
Resource
win10v2004-20231215-en
General
-
Target
01dd5fbc93fa93e864010d54a8d170d8
-
Size
93KB
-
MD5
01dd5fbc93fa93e864010d54a8d170d8
-
SHA1
ebde0ff6172f79c63cf7b61e635ae6b6890c7447
-
SHA256
30b5f3dccccaab4a8a81b94efaaffbd59909cc760140fb6ed3952927b80a3d56
-
SHA512
5e470f8ed753cde0ce866c30088bbc5012defb234abf1ba728c97e475cd4f028973225479457c6a1c9e55aeae67c08d72ddcc566c4f520c574889dc70145b8ed
-
SSDEEP
1536:SKcR4mjD9r823FoP7kmIzcNaH8oqfuuGlQF/pwDajTh0/6o0lcYGYVY:SKcWmjRrz3IIUaHG6U/pnjTh0/90OYGT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01dd5fbc93fa93e864010d54a8d170d8
Files
-
01dd5fbc93fa93e864010d54a8d170d8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE