Behavioral task
behavioral1
Sample
ddf510ab5206e9bc92b41b1709da2d9f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ddf510ab5206e9bc92b41b1709da2d9f.exe
Resource
win10v2004-20231215-en
General
-
Target
ddf510ab5206e9bc92b41b1709da2d9f
-
Size
212KB
-
MD5
ddf510ab5206e9bc92b41b1709da2d9f
-
SHA1
0cf8b49526001d44ca2763850d185c479e19002c
-
SHA256
4b49b410edb2a2d85c4f803c30676ea25141e894ef7622933eb6fd5a0f8c4d59
-
SHA512
7de1c2a0e1c9f17b1e0d83539e7e430eae58cbd7739dbf717fd078abdd821b0fd269f3f7a93f2ca7a555e75ee8f82580606dd62af143f6abe51469d2b180a960
-
SSDEEP
3072:PJacj8v7wQ+ZGx7w8wjjP8I1IU8RjrzzvUWAOZjfKdLnYP:PJPgv7wJZ87wBjYI1IUwrIOZyYP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf510ab5206e9bc92b41b1709da2d9f
Files
-
ddf510ab5206e9bc92b41b1709da2d9f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE