Behavioral task
behavioral1
Sample
de52d9ea46abee2f8922c19b7f1e407d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de52d9ea46abee2f8922c19b7f1e407d.exe
Resource
win10v2004-20240226-en
General
-
Target
de52d9ea46abee2f8922c19b7f1e407d
-
Size
325KB
-
MD5
de52d9ea46abee2f8922c19b7f1e407d
-
SHA1
296e40abcb8f224cc9109af21c9cb12d732992da
-
SHA256
0035bd3727cd9b64bef65ca26398c9635a17e87ee3c8132d3ad808c322c90f4d
-
SHA512
9985f3ee42d937e1c3fcdcd6913c73f58d4549dbb1d1ad9e4cd8c4bbd9be143f3724683e4374b666b45415fae56df78023255925d58b734669063d8fe1340e0b
-
SSDEEP
3072:xpNp3PrV88pTJvxiEGJAXH/qbrt4giGhYa1syLM/d6TEdJwfpIRORHk/eJsf8h:xpr3h5pTJv8bjJ4grRk6TETwBIameM8h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de52d9ea46abee2f8922c19b7f1e407d
Files
-
de52d9ea46abee2f8922c19b7f1e407d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 504KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE