Behavioral task
behavioral1
Sample
d3dd9f79a295c2b12194f5fe513476f1.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d3dd9f79a295c2b12194f5fe513476f1.exe
Resource
win10v2004-20240226-en
General
-
Target
d3dd9f79a295c2b12194f5fe513476f1
-
Size
2.7MB
-
MD5
d3dd9f79a295c2b12194f5fe513476f1
-
SHA1
0936ab63bdd33f5c6de8eb9c7b089dd8b52f3d7a
-
SHA256
136deefd428cd66c1c700652a7753b5bf2dbf859d3bfd29c182050dffb92d1ce
-
SHA512
9d8f766801d22bebded61fd97f680494317fa5344aed5525153cbb5d117c1da047cce9493fc3fe0989028f95bc35b10600dd763ab109f299e6623d40ff61ae2e
-
SSDEEP
49152:FNxAtncHQ8eyvrBHmNTGQIIiYttpyiDzkHh8pXUJBbNWTjWI9vt09aLqzegf:MnKxcNGQP9xydB8ZubNWTjW0vtjLqLf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3dd9f79a295c2b12194f5fe513476f1
Files
-
d3dd9f79a295c2b12194f5fe513476f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE