Behavioral task
behavioral1
Sample
de7c5a2742b0eff79df438c93d8f7557.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de7c5a2742b0eff79df438c93d8f7557.exe
Resource
win10v2004-20240226-en
General
-
Target
de7c5a2742b0eff79df438c93d8f7557
-
Size
241KB
-
MD5
de7c5a2742b0eff79df438c93d8f7557
-
SHA1
6f6ea1da0900144cf49f22f56ee545cb466226bc
-
SHA256
a9c33f01a85e0cfb409326b2a9589d7dec53f35c873b58291b9b94b856ae36bc
-
SHA512
3967adf6654e7df0886945d532c8a1a9386e19480a71b504937bc9b594619e9b6246a76616cba2c8416cb535ee2b8c304109fa9888f0bb9c08ab399b63bc0586
-
SSDEEP
6144:MJbeVbZqrdteaR/jtOd7AlPcN5C4Hum4G7nWF5:grdteG7Ed7OUrfuwnc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de7c5a2742b0eff79df438c93d8f7557
Files
-
de7c5a2742b0eff79df438c93d8f7557.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 548KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE