Behavioral task
behavioral1
Sample
d606c9af7d55bb46099a9fc18ef45668.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d606c9af7d55bb46099a9fc18ef45668.exe
Resource
win10v2004-20240226-en
General
-
Target
d606c9af7d55bb46099a9fc18ef45668
-
Size
29KB
-
MD5
d606c9af7d55bb46099a9fc18ef45668
-
SHA1
781c42b703f3dc9575cc1eeee096facbb7344476
-
SHA256
2e6a1e9f664571f4a83615a2bd1310affc0f8599d1e78509bdd3b3fdc5fca45b
-
SHA512
2522a442f145bf5bd6c9ab7b47534f4e839ce59c16a16d6256682c6040399cf81f0921f314af8024c294565230cd3df5471f7aa2b28e0bb3525ae305447eac11
-
SSDEEP
768:IXtsN3GIxiOd0u5CspKIo1RXJ+/BGJpIvc3:0sQwi0zzsIoFKBG33
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d606c9af7d55bb46099a9fc18ef45668
Files
-
d606c9af7d55bb46099a9fc18ef45668.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE