Behavioral task
behavioral1
Sample
de6e3935df2241e45dae1273ae872690.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de6e3935df2241e45dae1273ae872690.exe
Resource
win10v2004-20240226-en
General
-
Target
de6e3935df2241e45dae1273ae872690
-
Size
137KB
-
MD5
de6e3935df2241e45dae1273ae872690
-
SHA1
741a549963733bdc40276b07ce002de826947a1e
-
SHA256
e85b82bff05a68dd4edf055f7b9e713e7eba4a20e4462ef3c88b1e58ea26c61d
-
SHA512
be1c82f071c8d5dcc24760e7867da66647b195c84efe331dcb0952a6266eb5080f7f862a4809390f4611313877abc073a166d3eab2b6d4325d9f742cb8a84753
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wf:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6e3935df2241e45dae1273ae872690
Files
-
de6e3935df2241e45dae1273ae872690.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE