Behavioral task
behavioral1
Sample
d4329ff6301108e5395ccc740a42a58d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4329ff6301108e5395ccc740a42a58d.exe
Resource
win10v2004-20240226-en
General
-
Target
d4329ff6301108e5395ccc740a42a58d
-
Size
1.8MB
-
MD5
d4329ff6301108e5395ccc740a42a58d
-
SHA1
f59a107af2aede35d8b44b81305ed986eae18d94
-
SHA256
e2c8d114a85491f8c97504497391553027de929af452036c2f2043e1372ee992
-
SHA512
f58194243b9ff9501dffe29b99c93922eb152761f5ac71b55b9c7d9f7c0cb0f744919b94a967f43e1a54b38ec1cc45f647c199ef55b4fff61a10f760a5cf19c3
-
SSDEEP
49152:hHtoURF6piFqcrDBE133YRL5HhF7LfFYdzLZhIoCTG9wb09V8F:dt/PkUqWBE133ktbLfQZIG9cn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4329ff6301108e5395ccc740a42a58d
Files
-
d4329ff6301108e5395ccc740a42a58d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE