Behavioral task
behavioral1
Sample
dedc537c56d93f4a6109702d3c55740e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dedc537c56d93f4a6109702d3c55740e.exe
Resource
win10v2004-20240226-en
General
-
Target
dedc537c56d93f4a6109702d3c55740e
-
Size
1.1MB
-
MD5
dedc537c56d93f4a6109702d3c55740e
-
SHA1
af835ff00f75da90c03959c834eea635e4b22c9e
-
SHA256
a4930ffb9bdc94307bb138f80a6676e1c68bcc1cabd0cb95970c29e484491a1f
-
SHA512
f4ca19fa7e6f0330fb997922b3af4110b0054e11068bd7329ff5491e4b7570826e71a43cca8f4dfcfbcf21471e434d7edd03f94c6982fbc4ef6f89ab9c65d6e0
-
SSDEEP
6144:PFKiOzC8VEXAouuoSBlFX8d5efJ0yYovZj8eY9el1PZ/HHC7qc1P2iIwyMTlzZj1:PHkVE/oSC5efTtI9KfX1IpR9121w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dedc537c56d93f4a6109702d3c55740e
Files
-
dedc537c56d93f4a6109702d3c55740e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE