Behavioral task
behavioral1
Sample
ddde2cbe8aecf74740d651d7fcc0bad4.exe
Resource
win7-20240221-en
General
-
Target
ddde2cbe8aecf74740d651d7fcc0bad4
-
Size
1.5MB
-
MD5
ddde2cbe8aecf74740d651d7fcc0bad4
-
SHA1
42e3feb350c8c00631bade8cd2325c1e0e4abdb8
-
SHA256
f7c94d316662a7c43aa8d4177ee3f6bf34e54f68c1a0f185ab9366aa0596b89b
-
SHA512
4c103173b2aae3c6bd26159b5ff93934294eeb981492336499755b39d9bb07c571fbc2346ded9307825096602ffe231319c475478447a21643aa2678370174fb
-
SSDEEP
49152:mDG8k0gscDqWCJj9BAz1L9nSB4DaKg2AjwU:mDG8FBcDqW0Q5yi9AwU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddde2cbe8aecf74740d651d7fcc0bad4
Files
-
ddde2cbe8aecf74740d651d7fcc0bad4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE