Behavioral task
behavioral1
Sample
de3b00624679553773de8f7817526234.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de3b00624679553773de8f7817526234.exe
Resource
win10v2004-20240226-en
General
-
Target
de3b00624679553773de8f7817526234
-
Size
254KB
-
MD5
de3b00624679553773de8f7817526234
-
SHA1
708a6f44bae5d21032df6c156784a47fb1d1694b
-
SHA256
cbfe69be1ce3aa62099f668e4fe12e3b597739a11ca7338e279efe9b140cde3b
-
SHA512
7a9cafb226e847497c9d73b8528ca23c893b3d72a9364eba1cb806a8666cf96771f642ca382d168be4b9bce48b2b0d40ec6fff8d5481cf5e9d010efb7a1419b9
-
SSDEEP
6144:/+5zoEY9lekVy6fFM2Es6qxXiBCG89FifOPO1RXoKmR/58+ei8iF:/WzoPPx5fFMFS5iF89FAl10s+18iF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3b00624679553773de8f7817526234
Files
-
de3b00624679553773de8f7817526234.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE