Behavioral task
behavioral1
Sample
d5094f3237fe195b924820fc6435ac92.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5094f3237fe195b924820fc6435ac92.exe
Resource
win10v2004-20240226-en
General
-
Target
d5094f3237fe195b924820fc6435ac92
-
Size
178KB
-
MD5
d5094f3237fe195b924820fc6435ac92
-
SHA1
db49cbfa3c55e9e8610282b29a4e98404fa26b42
-
SHA256
e436eccb1eb27ef209d44fe3baf592deaac435b90d27be6e6032f0e03ff239f7
-
SHA512
e2c18c5f8b5199b83fb3ce1352e611c76fd4250643e8da8c7c7747fd0ebc75cd903cf486ee56cb6ecb1fe0533407b942ef0db9f7d726e461bfc3e18b1538c3ac
-
SSDEEP
3072:cVjRYX/blNqL+ljaL2BHPcskg1asXV2G8N0UulbfJgIDcVG5n0Jb:cVjRgrM+ljM+PH1/2NWJv50Jb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5094f3237fe195b924820fc6435ac92
Files
-
d5094f3237fe195b924820fc6435ac92.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE