Behavioral task
behavioral1
Sample
d6ee9fa83031935e2cd030ac2e59b56a.exe
Resource
win7-20240221-en
General
-
Target
d6ee9fa83031935e2cd030ac2e59b56a
-
Size
402KB
-
MD5
d6ee9fa83031935e2cd030ac2e59b56a
-
SHA1
fc0a5d1a772c6ca6c6243b70479559c109cc5db4
-
SHA256
b99ec70cd7edd3c562273959225176252fc14cc4564fad04d67e93f21b7627ec
-
SHA512
7ccdcb46d635c852ebc582ba526681bf280222a0e70867c807556f511cbffe832d36d82a79381b496b81ae9758711513d1e81130a41bfa737fa534224cc2ad96
-
SSDEEP
6144:+maKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgW:PSmLAuEY71fviagATFmebVQDcYc6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6ee9fa83031935e2cd030ac2e59b56a
Files
-
d6ee9fa83031935e2cd030ac2e59b56a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rze Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE