Behavioral task
behavioral1
Sample
d4089270b3597d2278e73aad06d61505.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d4089270b3597d2278e73aad06d61505.exe
Resource
win10v2004-20240226-en
General
-
Target
d4089270b3597d2278e73aad06d61505
-
Size
133KB
-
MD5
d4089270b3597d2278e73aad06d61505
-
SHA1
d29d135ba9fdd967914f5a81920c6797f55e91cf
-
SHA256
bfe90cd37a21d83e3336e2f7adf2ded6f9a4647c98c0149647a867d6411e2b89
-
SHA512
97f102a0a24088948cd6daa6f2568529501a53f79a228e7b9df3735c614673773f5f951ad91615aaa7d702d0d4681681fa5a98acd6b16292d7d5d3256f331954
-
SSDEEP
3072:7NJX2SfbPbpJN7qyCu5vKg57e6NnJoTcQ:7nX20Pb3dqekgVe6N2IQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4089270b3597d2278e73aad06d61505
Files
-
d4089270b3597d2278e73aad06d61505.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE