Behavioral task
behavioral1
Sample
d3ea1e9b1f5bcb6a7978f509b258925f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3ea1e9b1f5bcb6a7978f509b258925f.exe
Resource
win10v2004-20240226-en
General
-
Target
d3ea1e9b1f5bcb6a7978f509b258925f
-
Size
309KB
-
MD5
d3ea1e9b1f5bcb6a7978f509b258925f
-
SHA1
77e1135e1b1effd70c54ff0ee9727832beb3d8b6
-
SHA256
ddea39c1121d5cc9eb3303705af41bc6a7beeae99214b477d6702a7d849f6e0c
-
SHA512
f8bd94d8dd722ca52558c4921603d5327ad2895fdab3b4d9d9abf9b1ff4954aa4fcf3df144d1b1c4dd662f02effe9a7a90bf6c05b77a22c0e6cd92564cc9fbba
-
SSDEEP
6144:fjM31fbne8fdPoo/sX5Izs5mdVy+HBvti9RLE4seSFEOJthCnzo0Lm:7M35ioZ/i5IAc7hFT4s6OzUzo0K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ea1e9b1f5bcb6a7978f509b258925f
Files
-
d3ea1e9b1f5bcb6a7978f509b258925f.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vsp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE