Behavioral task
behavioral1
Sample
d75db952af302c0e99fcd5953105f80e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d75db952af302c0e99fcd5953105f80e.exe
Resource
win10v2004-20240226-en
General
-
Target
d75db952af302c0e99fcd5953105f80e
-
Size
47KB
-
MD5
d75db952af302c0e99fcd5953105f80e
-
SHA1
a97789bfc94b9baaae84ad82abff26d7282dc5c8
-
SHA256
78891d89e9f2e003523dde6ab6ffa9e1dc994e08db7a62cbf516e8aab8e00490
-
SHA512
c2f934d41ffaef15f2d5ed64f7ffcde9af43f1e8947503eb9dd5766ca0eadb04539dae006e0c98c6f35fab8b84ffaee750957e4be54c8700954673260644c6a3
-
SSDEEP
768:eBI+5qhzM+SxdNx9HeSyyUln9L/+80xh6jFFnZF3PKIqa1B6v2eRTd:e0hzM+U7H1yTD+80POF3q19d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d75db952af302c0e99fcd5953105f80e
Files
-
d75db952af302c0e99fcd5953105f80e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 485KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE