Behavioral task
behavioral1
Sample
d6a0f2e5a4bc0ac2aa0359afb8c24afc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6a0f2e5a4bc0ac2aa0359afb8c24afc.exe
Resource
win10v2004-20240226-en
General
-
Target
d6a0f2e5a4bc0ac2aa0359afb8c24afc
-
Size
35KB
-
MD5
d6a0f2e5a4bc0ac2aa0359afb8c24afc
-
SHA1
4f0e07348f3f4cae6170f6133e62232df17d0975
-
SHA256
cb843f00e9cd1bd424b095fd6757a5eaf7b1af84569b108825358e02ec4b8d0c
-
SHA512
e324db88f2026ad1b5a28a1300ee3bb7662009567e49536cd354e85ccd203ccb870e3c565b9df45455cae693e484270d5e749ac7eb72f5f3404cb045a3c52b43
-
SSDEEP
768:x9O2CPa4WgYkyfU92BYWpQZqIVmFE8nl4lzcim:+D4g9PZqw+4Bcim
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6a0f2e5a4bc0ac2aa0359afb8c24afc
Files
-
d6a0f2e5a4bc0ac2aa0359afb8c24afc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE