Behavioral task
behavioral1
Sample
dddf58258fdd3425ff8b3ae5821f0e2f.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
dddf58258fdd3425ff8b3ae5821f0e2f.exe
Resource
win10v2004-20240226-en
General
-
Target
dddf58258fdd3425ff8b3ae5821f0e2f
-
Size
1.8MB
-
MD5
dddf58258fdd3425ff8b3ae5821f0e2f
-
SHA1
b3c5af3c17639030f00fafadb9d787630c7e0169
-
SHA256
908e0e19d9988423a2d6ba5ec930da7ad05e9cc8e079b6ae45582e7609f184b7
-
SHA512
e1c00aef1b3d173a50bc4507699c981988f0561e975e0ac917cf75ad6627abe9f96751338bb30683951de0483689e1bde5d9ea022ba5a80ca4eaee60c40faa4e
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqC:SCqm2Jpr0nNM7Dus7Nxn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dddf58258fdd3425ff8b3ae5821f0e2f
Files
-
dddf58258fdd3425ff8b3ae5821f0e2f.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE