Behavioral task
behavioral1
Sample
d54f6f072948c570846e03fec69d5d46.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d54f6f072948c570846e03fec69d5d46.exe
Resource
win10v2004-20240226-en
General
-
Target
d54f6f072948c570846e03fec69d5d46
-
Size
302KB
-
MD5
d54f6f072948c570846e03fec69d5d46
-
SHA1
61bc43eeefca2a5f9e3d11b4f361c0d60c7f2d03
-
SHA256
de3c6f1e05ed0c7182180ddf5b2056372e217d9171af3b7ef0de967dfaf5cb69
-
SHA512
b808fb32d71590f5894eb956a96580f492b4eaaf231ad71b718fca458c0f60c2567ea07c4f21d2df9d866d5a63e30f3c22bdf264e54818f90d29aa377e92cb13
-
SSDEEP
6144:caMVNtmKjfEn265toi44P57AoAFWjaHjLS9Pn379cD6mQ:caMV2Rn2Ueq5kHIjaDLS9Tc6m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d54f6f072948c570846e03fec69d5d46
Files
-
d54f6f072948c570846e03fec69d5d46.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE