Behavioral task
behavioral1
Sample
d5dbe8e2b0b35d081727bee2ce70b244.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5dbe8e2b0b35d081727bee2ce70b244.exe
Resource
win10v2004-20240226-en
General
-
Target
d5dbe8e2b0b35d081727bee2ce70b244
-
Size
302KB
-
MD5
d5dbe8e2b0b35d081727bee2ce70b244
-
SHA1
a2b14ede7bb0493693a70d2e8dfc934f67f5f7b2
-
SHA256
dc33ce6d39d1273e16dc3a2b5b6f42b4bae4bd05c4e860faf3eb96683d549a38
-
SHA512
c1fd93a2eab0fdfaec7bd3ccaf4f8cec23f851a89ee7e61890c9791a3fe4f3a03abea27794dd30a526c32362ebd477542af942d7651295b060cc23e7f950f21e
-
SSDEEP
6144:s5kP5tkzRvWWehjUVPvMUYM/rfE5fjwm4mmQ:5tktcWSbtimm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5dbe8e2b0b35d081727bee2ce70b244
Files
-
d5dbe8e2b0b35d081727bee2ce70b244.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE