Behavioral task
behavioral1
Sample
d6e5240f5faaaf158f75cb0df18a25ae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6e5240f5faaaf158f75cb0df18a25ae.exe
Resource
win10v2004-20240226-en
General
-
Target
d6e5240f5faaaf158f75cb0df18a25ae
-
Size
75KB
-
MD5
d6e5240f5faaaf158f75cb0df18a25ae
-
SHA1
69732b8947a84654118da2c95bc19abb0be8e17a
-
SHA256
865cbd9425e164aaf392847b12fc3a20a76b4abdd82cf93a4c6140c63669b583
-
SHA512
c9f803969c974ea2e10fcdbff77d6678407d36c2285d39cb160a4c3141d3bf8c79f20cf328e862497f4ff638c3b9dca44929a8a2c34dacadb7dbdc3290df32d1
-
SSDEEP
1536:SKcR4mjD9r823FHKcR4mjD9r823FPDNmbKU6XJXZylQf2qBOt5:SKcWmjRrz3ZKcWmjRrz3xDNmbKUK92x5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e5240f5faaaf158f75cb0df18a25ae
Files
-
d6e5240f5faaaf158f75cb0df18a25ae.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE