Behavioral task
behavioral1
Sample
def844e39900f75f968836da67cc31fd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
def844e39900f75f968836da67cc31fd.exe
Resource
win10v2004-20240319-en
General
-
Target
def844e39900f75f968836da67cc31fd
-
Size
297KB
-
MD5
def844e39900f75f968836da67cc31fd
-
SHA1
9613951a72d1bdea416c60e1bfbf9c79947f9cfc
-
SHA256
bed1c56d85c594c10ba1154f396cad3dd999fced8215aa6ae1bf07c687fd20fd
-
SHA512
ea6170458ed45ac2f6b52bfea732d06791dd67053af9a748c19a15cac92c3444c2f1ba9dfba7c5adee1c0e03acfc3b5b57ca755664ca67abe9b1707b469ff6e0
-
SSDEEP
6144:7RbhR2UqmPwQdIsTR7cIQLtQQ7n3+9IdtS+CqtCFDcFnzld4zJ06:7RbhR2Uqm4qIsT3QaWmI+fqCFDcFzv4z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def844e39900f75f968836da67cc31fd
Files
-
def844e39900f75f968836da67cc31fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 287KB - Virtual size: 288KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE