Behavioral task
behavioral1
Sample
d77feb63589d1344eff514d1d9221fb1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d77feb63589d1344eff514d1d9221fb1.exe
Resource
win10v2004-20240226-en
General
-
Target
d77feb63589d1344eff514d1d9221fb1
-
Size
3.0MB
-
MD5
d77feb63589d1344eff514d1d9221fb1
-
SHA1
3e230b633a2087ce893c7a113779bb34bfe5685d
-
SHA256
7d93d940688fa181beb3cc4900c72a881d5ac62fb35c9e8af0fb6b1b7a24f4e3
-
SHA512
1b77fbd127b31ac66a00fc969bd7f7d6568e8fd5b28601f10f9bbf723a232ddd923d0cb05e148f0bf32d7a2306a9fe5bb1e6c498f92fc10c0b68f99c7e60dd96
-
SSDEEP
49152:rmbtTQfb48Cfw/ejQs7TvncakLWqhC2TH5t8NlqMcakLkv7lVdBAo1MkycakLWqz:rmpTQfE8Cfw/ejQs7TvncakKaC2TZt8x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d77feb63589d1344eff514d1d9221fb1
Files
-
d77feb63589d1344eff514d1d9221fb1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE