Behavioral task
behavioral1
Sample
d791957a793a4a3935e7c0eb944ef4e8.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d791957a793a4a3935e7c0eb944ef4e8.exe
Resource
win10v2004-20240226-en
General
-
Target
d791957a793a4a3935e7c0eb944ef4e8
-
Size
2.8MB
-
MD5
d791957a793a4a3935e7c0eb944ef4e8
-
SHA1
6be6f93358bf6a0762a1bb3e983fdcaa885994d2
-
SHA256
4d6e8da4342e38f6c163baf86ec6e79fea70c1218c0c00af7e88fd17ac644874
-
SHA512
01caf7ee454de3b823c1bf077834efc184f8642e66eda59ef1804ac65a1505d73e8f8b357b6d319d473b8429fa197b3e27253a3e019cb2ebd8b70a52b829a8a7
-
SSDEEP
24576:S6pQPxQ2JyP2r5mZVN1xM7RpbwgIvs7NxqUkHE6pQPBQ2JyP2r5mJV9lO:SCqm2Jpr039M7Dus7Nx2kCq22Jpr0ny
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d791957a793a4a3935e7c0eb944ef4e8
Files
-
d791957a793a4a3935e7c0eb944ef4e8.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE