Behavioral task
behavioral1
Sample
d5921f5f184875dcbf7fa1c163a9ab28.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5921f5f184875dcbf7fa1c163a9ab28.exe
Resource
win10v2004-20240226-en
General
-
Target
d5921f5f184875dcbf7fa1c163a9ab28
-
Size
3.9MB
-
MD5
d5921f5f184875dcbf7fa1c163a9ab28
-
SHA1
02cdd73c1af6b8847195632ad344c8f9374d31f2
-
SHA256
cbcd452f9c8ac87d2ff64d7805e2836c4f0ee297ccc0c11a891c7eb8cfa94866
-
SHA512
e5163a9c74849022f345bc9542ce4326b6e23b83beb7948b2d1ff148c9289986f94740d4f78b78499228da5f5dc2f446eaa79f400059083131a3d77ddb58e7ad
-
SSDEEP
98304:21CyAuND82v9D2i7D3xkOxYwpKaUroj0m/iD2i7D3xkOxYwpKQO9fMua8tWD2i73:21Cyrx82v9h7FkNqKTy/ih7FkNqKQaa/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5921f5f184875dcbf7fa1c163a9ab28
Files
-
d5921f5f184875dcbf7fa1c163a9ab28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE