Behavioral task
behavioral1
Sample
de3125676003d1149cc1df553cf61f5d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de3125676003d1149cc1df553cf61f5d.exe
Resource
win10v2004-20240226-en
General
-
Target
de3125676003d1149cc1df553cf61f5d
-
Size
139KB
-
MD5
de3125676003d1149cc1df553cf61f5d
-
SHA1
4713e4c17c39224c12d4d86f5a628b6ff3c8fb6f
-
SHA256
e6cdb24db85a40e86b935fe2a77937d3562dc055853a944898f27a67dc78a801
-
SHA512
0e3acbebb671c8ff0215a48fb4b23441f075fbe04cf50c2749682c17c3133d6eb04bc7bbe349c5e54d4302924ba879d6e278c363bf107c9730f2ef70284abbf2
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3125676003d1149cc1df553cf61f5d
Files
-
de3125676003d1149cc1df553cf61f5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE