Behavioral task
behavioral1
Sample
df1019deb908ac38116d6f0fb085f0cf.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
df1019deb908ac38116d6f0fb085f0cf.exe
Resource
win10v2004-20240226-en
General
-
Target
df1019deb908ac38116d6f0fb085f0cf
-
Size
155KB
-
MD5
df1019deb908ac38116d6f0fb085f0cf
-
SHA1
492244275d0868fd3c1b076fa0438bb9b336281c
-
SHA256
dbc2276449b13cbd48d522907aa847fd6bde7676b42dd0fbcf8a5134bf95e756
-
SHA512
c236e6ed7ed52f20b85c8612b36323bcf2d309e43a6d2f234355415e3bbfbdbbdbc024a3b42dea928fbc411a0a2b18bf88af6d543a3e49e26f0c87a69e118d20
-
SSDEEP
3072:wEI2tPlgDEBMUZt/hdhp0gVAVtN7xXpkCuhJSN4ZsKjw232skm:wE3PyIrt/JubLxluhJOj21t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df1019deb908ac38116d6f0fb085f0cf
Files
-
df1019deb908ac38116d6f0fb085f0cf.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE