Behavioral task
behavioral1
Sample
d1ec1647490eedd1fb48d755b8a6fbf0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1ec1647490eedd1fb48d755b8a6fbf0.exe
Resource
win10v2004-20231215-en
General
-
Target
d1ec1647490eedd1fb48d755b8a6fbf0.bin
-
Size
87KB
-
MD5
d1ec1647490eedd1fb48d755b8a6fbf0
-
SHA1
015da612b5cc506c9988f022659011434c5a6c6a
-
SHA256
c1fe85610a23ac1358e234a04c03013fe69b1a59e3e6b572b782eea7efd08d8d
-
SHA512
35f60435ef4a484482472cd779ea52f4873852ca48fde14f52c12ebbc681b70598f5a7ec35ce44e4742b037a427faf068092fd5d06ebe3bafbf3b7b5b5c7b760
-
SSDEEP
1536:bsZ0wWYnT2eQad8sg02Lb1HBSq6e2tYR6/BXnS2TwBfHg1WXauCZe:bO0snka+r02brST3e4BXnHMB6XA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1ec1647490eedd1fb48d755b8a6fbf0.bin
Files
-
d1ec1647490eedd1fb48d755b8a6fbf0.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE