Behavioral task
behavioral1
Sample
debe4ceb4a7130aa9167feb43bbccf64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
debe4ceb4a7130aa9167feb43bbccf64.exe
Resource
win10v2004-20231215-en
General
-
Target
debe4ceb4a7130aa9167feb43bbccf64
-
Size
1.5MB
-
MD5
debe4ceb4a7130aa9167feb43bbccf64
-
SHA1
60747ac999d5da3096d3216e72727922acf22231
-
SHA256
6aefff1c302345da2d7f5f3968362c6c81d9d0b5488f96b884fbf91819b13359
-
SHA512
69f869519f5d3da10800b6a35e7d03ef9f3505760a20e0a57a71964e8f27d0a88ca1f3b254274ad13563eee6db83e8b847b98e606d5536b8d3094ec129ec172d
-
SSDEEP
24576:ZuOD2kj5kczo5nW8QynR1QVr1wiYE6TOfQS1WNncIDpzW:VjC9dyyTBiYE6Te1ic2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debe4ceb4a7130aa9167feb43bbccf64
Files
-
debe4ceb4a7130aa9167feb43bbccf64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE