Behavioral task
behavioral1
Sample
d778e9d773e908bcb188717cad81756c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d778e9d773e908bcb188717cad81756c.exe
Resource
win10v2004-20240226-en
General
-
Target
d778e9d773e908bcb188717cad81756c
-
Size
56KB
-
MD5
d778e9d773e908bcb188717cad81756c
-
SHA1
1bf7d1d677de0a62b5c82754c7f87f22e2c69b57
-
SHA256
d9f1028287f54012f25aa7c22ec9af966759b047377e7eefad30114fa6028bb1
-
SHA512
c9636a0aafa8ec823f75ceb9c284fedc0f73703254aa2a908638eb1d1736bae6eaef2370a305a7dd208aec091234737f9a53500a6eeb336db2dcb31ab324cdb4
-
SSDEEP
768:BuhPhDpUMO58J99RDOo8NcdWtzTf8eVObtyfR3dfj+6FXuvBx1kmr+Wj7fIZxhPB:BKNOKz95OM+QC3dfi6I4mmppF+vC7vN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d778e9d773e908bcb188717cad81756c
Files
-
d778e9d773e908bcb188717cad81756c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE