Behavioral task
behavioral1
Sample
d66b9477d6b1a41e4373f9555b40860a.exe
Resource
win7-20240221-en
General
-
Target
d66b9477d6b1a41e4373f9555b40860a
-
Size
784KB
-
MD5
d66b9477d6b1a41e4373f9555b40860a
-
SHA1
a59c1b132d7fab7ec9f112b191a638885829e904
-
SHA256
355fba3986954bf1964e823703a9460d3022000968c41832098ea4c98b88f17a
-
SHA512
24bc257cb7ed7e6c5cf1915107c47aef7c878c8b2a93b53b1c38269845d6d2ce7fe4853cba430edc14744b9bca3b62e7a702c66d28217ff4101cdc45864eac4c
-
SSDEEP
24576:nLXAaYF4y/G50VQ5GpW/W5FsLH5XjfNxtRd:n3un+qiEW/WIVXTNXf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d66b9477d6b1a41e4373f9555b40860a
Files
-
d66b9477d6b1a41e4373f9555b40860a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE