Behavioral task
behavioral1
Sample
d72c24909a4f730642ed5a6d2cdfa911.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d72c24909a4f730642ed5a6d2cdfa911.exe
Resource
win10v2004-20240226-en
General
-
Target
d72c24909a4f730642ed5a6d2cdfa911
-
Size
532KB
-
MD5
d72c24909a4f730642ed5a6d2cdfa911
-
SHA1
e5e13979a833291172695d8aa6db8e64a40d2c08
-
SHA256
6bd1a6792469d56ffa58de6938d871e4cf8f0beb1ddd682eece17608ed722f33
-
SHA512
6fb9b3b2a67154bfaff91fd7086f3daef161d2a66faba20b13499847247d18363744736dc6f1db1fd0d42be41e2a51569d14b22b05d96014925b922dc334d83e
-
SSDEEP
6144:DuUomeCAoPgOHqpMPVZzG34zHmKQH0yqDKxZx1MfsLOItCjRteF2CxLKx:DaPCf/oOZErx1MUOYkXeIcKx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72c24909a4f730642ed5a6d2cdfa911
Files
-
d72c24909a4f730642ed5a6d2cdfa911.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE