Behavioral task
behavioral1
Sample
de8fcac1a267c54cb144fc712df41a06.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de8fcac1a267c54cb144fc712df41a06.exe
Resource
win10v2004-20240226-en
General
-
Target
de8fcac1a267c54cb144fc712df41a06
-
Size
133KB
-
MD5
de8fcac1a267c54cb144fc712df41a06
-
SHA1
be83d137945cf8dae7b51aec8187e414491cf23a
-
SHA256
4215f1303bc619d37ea786303c1c70f25d04584dd74eca165f7d0da77d6644f2
-
SHA512
b8ac2f90fd4748885e5e6a99eb153c72fbb53dd11f9a0290e3596add8f4de9652b0647f82c80dba3c365541291d11c0034e41a5f139f41e1642fd76fcb93e276
-
SSDEEP
3072:B8h5vTuAOh+f6+eDc4bUUlWtlnGcl2WbBOr50Aijott5KuFsKcbuvLI0USTQ:yfvTyheSqnX295gct5JOOLUOQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de8fcac1a267c54cb144fc712df41a06
Files
-
de8fcac1a267c54cb144fc712df41a06.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE