Behavioral task
behavioral1
Sample
ddd7985911de76bb8051adff9d95bc3b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ddd7985911de76bb8051adff9d95bc3b.exe
Resource
win10v2004-20240226-en
General
-
Target
ddd7985911de76bb8051adff9d95bc3b
-
Size
439KB
-
MD5
ddd7985911de76bb8051adff9d95bc3b
-
SHA1
ad50a9eeaccf5d799361e25afea9819549697e54
-
SHA256
d052fdd3e868e0496684f1fc76877f104ecf1b0786967363a749ab91f8a063c0
-
SHA512
a503e7924ef1efcd53df81a0939663517b6e8ca28692b506d34272499f94e414f3b69fb3e6d6777dffb2c8fa65dcb8199cb5ccd43a6162401c32e23bff7ee1e5
-
SSDEEP
12288:L4QTZxKbUi0L3oTMmtnpykyDo7fmTiKTR7rKiXoDZ:L4MeUN3owon0DkmTiqR7mD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ddd7985911de76bb8051adff9d95bc3b unpack001/out.upx
Files
-
ddd7985911de76bb8051adff9d95bc3b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 403KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ