Behavioral task
behavioral1
Sample
de5bcb4d2ff1a6138ca509ac3b6fa724.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
de5bcb4d2ff1a6138ca509ac3b6fa724.exe
Resource
win10v2004-20240226-en
General
-
Target
de5bcb4d2ff1a6138ca509ac3b6fa724
-
Size
544KB
-
MD5
de5bcb4d2ff1a6138ca509ac3b6fa724
-
SHA1
af10a46c082af494808031ba76f8d43e522520c2
-
SHA256
53ed8718e866c582502ddde189d92f8ea5b6c56ae7a3c5c2080761ee577bee0c
-
SHA512
93f504ff9cf4a594bea960e6f20a444e512bdaa88c7745b22fb7c499191b572d98ad58236e5a4c57c18500e3872b9b7a1140d1f1c892af8f24a33d77fc63cc43
-
SSDEEP
12288:0OhetBGQ/G1Fky7SwNSlTzJ+OfzltlGAUEYhy0Ef:r2G1FkyxzmnlvUEH0Ef
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de5bcb4d2ff1a6138ca509ac3b6fa724
Files
-
de5bcb4d2ff1a6138ca509ac3b6fa724.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE