Behavioral task
behavioral1
Sample
d577c898aaf700ba6a098a7b22f6e0fb.exe
Resource
win7-20240221-en
General
-
Target
d577c898aaf700ba6a098a7b22f6e0fb
-
Size
784KB
-
MD5
d577c898aaf700ba6a098a7b22f6e0fb
-
SHA1
de78bfc40f4673756537597cc2d06645306ff98d
-
SHA256
0a164456462e032ed0ec3fdb333c231e7864898422c3820aed8efb0751b2f519
-
SHA512
f96ba80ba59b7501e8aebed8debc5ea71c7aba36ac6d56e1a5f509e21bd4ca47a4b36a4e93071a1156f65df76c0db9810d6790fa496547c333ab1827b8550180
-
SSDEEP
12288:7SxahmdcpfRDrZIVz8sMuq3wbM+IQMvkoArpnNc+IgK/Iz0CeKer7:7CanxRPZ3uq3wbMvfAr1LeEkKe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d577c898aaf700ba6a098a7b22f6e0fb
Files
-
d577c898aaf700ba6a098a7b22f6e0fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE