Behavioral task
behavioral1
Sample
dee6cbef03372591e06a61eee37cfe3f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dee6cbef03372591e06a61eee37cfe3f.exe
Resource
win10v2004-20240226-en
General
-
Target
dee6cbef03372591e06a61eee37cfe3f
-
Size
133KB
-
MD5
dee6cbef03372591e06a61eee37cfe3f
-
SHA1
56c731e8e730ff1ae6bab8a5c80763c6fb70fd6a
-
SHA256
c80312a8407fc935ffc0e31aa24fa105666fc3ebc921b1082963c12d29467a6a
-
SHA512
92d5b85b2f0edd9f5182f3a8136d6543a48c92f0d1ff06e2a9a3436631ce62b94f8b6ed9b598b46a59ffdc6d554357f8a5e1460cb6e01b63e6de86774841e4cc
-
SSDEEP
3072:A6GGDw6zbGLP0gWvwFnHjdWHG7oZsr0SbI10HyBIUp0F4QQ:A6GKw6zbGrUwFnDdWm7oZIHIqSBIU6Fm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dee6cbef03372591e06a61eee37cfe3f
Files
-
dee6cbef03372591e06a61eee37cfe3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE