Behavioral task
behavioral1
Sample
d900808a6a66bdd9525ff47b894917d7104b49c8d4e16e38c3af76306e3b319b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d900808a6a66bdd9525ff47b894917d7104b49c8d4e16e38c3af76306e3b319b.exe
Resource
win10v2004-20240221-en
General
-
Target
d900808a6a66bdd9525ff47b894917d7104b49c8d4e16e38c3af76306e3b319b
-
Size
1.2MB
-
MD5
e9e9cb0e85858c09589fc4df0b34a232
-
SHA1
4bc5cf3c3ee9cc93f3c2a1fb8727477f8e9dfe88
-
SHA256
d900808a6a66bdd9525ff47b894917d7104b49c8d4e16e38c3af76306e3b319b
-
SHA512
110ec8d17c4ed07f06e7b2c5db228920f8dfd4a0b69d1bffd31e91a45dc0465560b676310ab28d714c56dd2691f617ceb6feb8e349a5ac4fa089a8a22faed98f
-
SSDEEP
24576:EswQm39HJoCyV06wczmRw1cdiDPnZ5pzzEfLpbnmjdPttnW5AH58zBJ:EswN39HJFMXwcoe/dQlGHf8BJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d900808a6a66bdd9525ff47b894917d7104b49c8d4e16e38c3af76306e3b319b
Files
-
d900808a6a66bdd9525ff47b894917d7104b49c8d4e16e38c3af76306e3b319b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 779KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 124KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE