Behavioral task
behavioral1
Sample
dec5ddbe002eafffd28f6e9ea13d4c9a.exe
Resource
win7-20240221-en
General
-
Target
dec5ddbe002eafffd28f6e9ea13d4c9a
-
Size
3.1MB
-
MD5
dec5ddbe002eafffd28f6e9ea13d4c9a
-
SHA1
a3b46f339833b223bf973fd2fc94f17638404e82
-
SHA256
71750fa04f4c636e74cddc56627f8a3d410652864e8350957b5bff175f10716a
-
SHA512
20a2b8acf56a4b4599a10b73ee618cdc2d2dd0b8e4ef24637935503527a226d77aa1db99365c13ca8ef5d38e174d286e494bc3e7416b3eb04117b4368ffe8a2e
-
SSDEEP
49152:gk3k7oGVWjbiSe+2YL/RsKAS8DH2k7mcn9Zqrd9sDGI/pqPJ+TNdJGp4GwBfc483:PGVWjpeKLJAm6Mot/QB+TNDGp4G948j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dec5ddbe002eafffd28f6e9ea13d4c9a
Files
-
dec5ddbe002eafffd28f6e9ea13d4c9a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE