Behavioral task
behavioral1
Sample
df036d06d05d9240c8e0d20b7d0bd112d6d687bcc1f9ae24ca6ba268f9e8c46e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
df036d06d05d9240c8e0d20b7d0bd112d6d687bcc1f9ae24ca6ba268f9e8c46e.exe
Resource
win10v2004-20231215-en
General
-
Target
df036d06d05d9240c8e0d20b7d0bd112d6d687bcc1f9ae24ca6ba268f9e8c46e
-
Size
2.0MB
-
MD5
543faaec0473d102839f2531ea4afc31
-
SHA1
6414f22ff3608319bbf7bc35f27876d4ac6c8768
-
SHA256
df036d06d05d9240c8e0d20b7d0bd112d6d687bcc1f9ae24ca6ba268f9e8c46e
-
SHA512
aaeaa44c75852ebf42466485ff9814b0121716a1b99b524b373ef6c2607a3314b4986e7a34c624b1033b0295b0d318580f4aa41b246dce9268a43a08bc0aa51b
-
SSDEEP
24576:j2cM8+eNyRvWnmfUQ77CStns3TgxPQsNfA0GezU2HeMytdMdflcW5AcuV0NjRMD/:j+8+8yJEmfUseOnXxPztAtU7HeMYf9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df036d06d05d9240c8e0d20b7d0bd112d6d687bcc1f9ae24ca6ba268f9e8c46e
Files
-
df036d06d05d9240c8e0d20b7d0bd112d6d687bcc1f9ae24ca6ba268f9e8c46e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE