Behavioral task
behavioral1
Sample
d38f31f2d323a390ec71d6898ac5f1ef.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d38f31f2d323a390ec71d6898ac5f1ef.exe
Resource
win10v2004-20240226-en
General
-
Target
d38f31f2d323a390ec71d6898ac5f1ef
-
Size
73KB
-
MD5
d38f31f2d323a390ec71d6898ac5f1ef
-
SHA1
0c02c30b0fa3fe46b8aa52e9db88531a97953946
-
SHA256
58d3155c8ad4889a8e184053a080ecc04c5661021de19814191b601ad1ab3d45
-
SHA512
db6e036295be6bc21e3bf9820aa84f5a7f17d090323acf16a3e6dc9eccc460b81239a4262ccd4769191c404536c7baec5e2895f7378dbd38fdb1f045cde22dd1
-
SSDEEP
1536:XsZ0wWYnT2eQad8sg02Lb1HBSq6e2tYR6/BXnS2TwBfHgz:XO0snka+r02brST3e4BXnHMBu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d38f31f2d323a390ec71d6898ac5f1ef
Files
-
d38f31f2d323a390ec71d6898ac5f1ef.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE