Behavioral task
behavioral1
Sample
d1ebaab2a3d87193c4d5ac2a58762ff2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1ebaab2a3d87193c4d5ac2a58762ff2.exe
Resource
win10v2004-20231215-en
General
-
Target
d1ebaab2a3d87193c4d5ac2a58762ff2.bin
-
Size
7KB
-
MD5
d1ebaab2a3d87193c4d5ac2a58762ff2
-
SHA1
0b0ac9abd52d54080adec58b7fe9e7aea944a6f6
-
SHA256
989ff09b1b7651707453a1b5a1be6fac4c29591e97dc97af0cb38c32828d73df
-
SHA512
3b5956e30827ab53199413d77e5b0e3990111c0b12a4a303af73bf26b1918db529d7c7c0425474046f7b555113da665540a05aacdfb1da4fdb16c70d1ee40291
-
SSDEEP
96:DuDKZI4l/2PdpOa7lcaemFIKGJLkc0+Q9yNRZL4dEPiNE7MrHv73VM/ba/d:8KqquPdpRlXemFASc0VYyEmz3V0M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1ebaab2a3d87193c4d5ac2a58762ff2.bin
Files
-
d1ebaab2a3d87193c4d5ac2a58762ff2.bin.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE