Behavioral task
behavioral1
Sample
dde6303a66ca0a09bd7767acb5fd9872.exe
Resource
win7-20240221-en
General
-
Target
dde6303a66ca0a09bd7767acb5fd9872
-
Size
784KB
-
MD5
dde6303a66ca0a09bd7767acb5fd9872
-
SHA1
343cdac126d6972c8449ff874362a9932b2a7b40
-
SHA256
a3bd293461ca56553f5402968a82dee0363aa183f13cae0ac7992f53a49bba3a
-
SHA512
ecf3f1cd5f8b64f1e8607033190a1a7853ecdb6836720127d93f691c6249b1d6e15b9fbf537abb511875b60eaae621e3681fc0448e217844589fdb5aaa451503
-
SSDEEP
12288:PCNk/OtAauHigEakFwsqBlNeFRhwWYnwLfXgeV7M34pzEkIs0PdtKWc/W4IMI8n:aNk/jHYesOgfhlYq1VfGs0PdtJS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde6303a66ca0a09bd7767acb5fd9872
Files
-
dde6303a66ca0a09bd7767acb5fd9872.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE