Behavioral task
behavioral1
Sample
de257f62c4812cc844442b6466198072.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de257f62c4812cc844442b6466198072.exe
Resource
win10v2004-20240226-en
General
-
Target
de257f62c4812cc844442b6466198072
-
Size
2.9MB
-
MD5
de257f62c4812cc844442b6466198072
-
SHA1
d338b606cac503ec78491f20854c297517f81730
-
SHA256
51fd7fa5a1c772a17dc1365f13d279e35d0d59ad3e830f131e927731d3f5d24c
-
SHA512
d6420a4daf94ec5e617cc1aa0ee1259d85b4a292beea2b46a777047a78c74caeff7ea3b88952d60fad20ebe8f3772d185d8a342c996d6dd19d5d465b51176593
-
SSDEEP
49152:KC/c5nb9Z5/auyu0fEPVTzGzN74NH5HUyNRcUsCVOzetdZJ:pIb9ZUH8I4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de257f62c4812cc844442b6466198072
Files
-
de257f62c4812cc844442b6466198072.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE