Behavioral task
behavioral1
Sample
d53e9fb6fc917d95087df9f8532f363e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d53e9fb6fc917d95087df9f8532f363e.exe
Resource
win10v2004-20240226-en
General
-
Target
d53e9fb6fc917d95087df9f8532f363e
-
Size
949KB
-
MD5
d53e9fb6fc917d95087df9f8532f363e
-
SHA1
2218356f5a8f0e8c480ff82903b628f7f95ad4f7
-
SHA256
7d4cf2823501da7609796fd27bf14ce4f7157b5e4bb65c81e3221a297184fadb
-
SHA512
27786958dcbb18f7648613333567cc0b7315c00633aaff41371176c53f5d3e321e2968bbf0d43477844a21f5d3e4f7c8d54fde15cd218816a4bcd28ad9da95b0
-
SSDEEP
24576:gFxv+TAAF3y3Bd7FF6pbt351YTy0kdcKZM/IeMoPiEwxhv9C:yxGTnMBd7FC1YTy0kdcsMnFw7v9C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d53e9fb6fc917d95087df9f8532f363e
Files
-
d53e9fb6fc917d95087df9f8532f363e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 945KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE