Behavioral task
behavioral1
Sample
d70faa13abdfbbea96d0e87d27982899.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d70faa13abdfbbea96d0e87d27982899.exe
Resource
win10v2004-20240226-en
General
-
Target
d70faa13abdfbbea96d0e87d27982899
-
Size
459KB
-
MD5
d70faa13abdfbbea96d0e87d27982899
-
SHA1
f72540aee62e358f01ef3f7a5d77d61cdb61e931
-
SHA256
e7077b5bf0107a2925714a5ed8c74de7e714b9768a10457b31fe02d7082c82b8
-
SHA512
bf7e82fc09e6829d2ffd7eb8dd5f14d319e9db6770365735fa17d7b76dfcfea201c7191b615f03d9e970eac61f3efd8901f173662018c2ac2fd73cca890ad0b8
-
SSDEEP
12288:fXb1TjQ+p3rbNuqsDBFBygivAIKMV4qljNk2oSs:fXbrp3rbER9rNpIKW4qJW/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70faa13abdfbbea96d0e87d27982899
Files
-
d70faa13abdfbbea96d0e87d27982899.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 451KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE