Behavioral task
behavioral1
Sample
d74ca4402378ee9d3d1f9933f9bbff75.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d74ca4402378ee9d3d1f9933f9bbff75.exe
Resource
win10v2004-20231215-en
General
-
Target
d74ca4402378ee9d3d1f9933f9bbff75
-
Size
133KB
-
MD5
d74ca4402378ee9d3d1f9933f9bbff75
-
SHA1
56efd22d6e69be9d9bb6a6879b1e6ecb4773c1f4
-
SHA256
6249b8a1e41d3834a41d34245dbe30294a61904ccfeea4d907a4749de51300ec
-
SHA512
1dc617879fce186378615e2ecaf179c6bca4f3ba9c4d0f6e4490fca854026efdf4818efabfc04be3b1e51d49b85384c68b3d06d27cc092e931b4917d3dc5baee
-
SSDEEP
3072:nzfEhK66CTEhcjRZtyjqoZEczfLf5g5KlgPuwduqssQEk3gKYFssJQ:nzflymc1WqoZE4D5gglYuJZ3HxoQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d74ca4402378ee9d3d1f9933f9bbff75
Files
-
d74ca4402378ee9d3d1f9933f9bbff75.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE