Behavioral task
behavioral1
Sample
d4439708fa6f900bfd0ae35e65d7b485.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d4439708fa6f900bfd0ae35e65d7b485.exe
Resource
win10v2004-20240226-en
General
-
Target
d4439708fa6f900bfd0ae35e65d7b485
-
Size
5.1MB
-
MD5
d4439708fa6f900bfd0ae35e65d7b485
-
SHA1
a3fe475058549ddc592b78cf7dfa3dc4957f0551
-
SHA256
0dfae8842c89a3e6c5db5737d91cc8ba2f69c61a12ac51cd8859c846e62c9248
-
SHA512
b96289d64879d5ef2373e3139a43d6f5a8881857cd456c6886f16050e1b96009c5fbb3a52a57eb999afab8a2de54a129b7efee370bea78d91c9e3bd1d7af7841
-
SSDEEP
49152:nIVG2g6ffE1udOuibP61panxMU4JwYxNP8ECfe1ay3RJ+W8SkbI4Oy2e49xRminh:FRdby1pyM3NUs3nEXL/kHJMx83
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4439708fa6f900bfd0ae35e65d7b485
Files
-
d4439708fa6f900bfd0ae35e65d7b485.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE