Behavioral task
behavioral1
Sample
d38dda13a402baab165b38921ce9a29f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d38dda13a402baab165b38921ce9a29f.exe
Resource
win10v2004-20231215-en
General
-
Target
d38dda13a402baab165b38921ce9a29f
-
Size
11.7MB
-
MD5
d38dda13a402baab165b38921ce9a29f
-
SHA1
a764fd188f1064e0b44310ca148a71666cad779f
-
SHA256
0f3529d2de0bc75763626fef5871b0022e0cf5e687a465d24db68ed001f0b668
-
SHA512
3f2f673fdace96ac6f54ebf60eef6d5c4d1905aa0417deec18247d1d8b50844c0a6091390813f7e7630c394d51ac200d74e09cca8c0a1a6abf8135b88b9ad3e8
-
SSDEEP
196608:3Y8x8mtGhRaaCkN9qHGhRaUxoKNGhRaaCkN9qHGhRa:b8mtOxzNEHOKKNOxzNEHO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d38dda13a402baab165b38921ce9a29f
Files
-
d38dda13a402baab165b38921ce9a29f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE