Behavioral task
behavioral1
Sample
df243b661ab5ee3c2a713cf9c90bf242.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df243b661ab5ee3c2a713cf9c90bf242.exe
Resource
win10v2004-20240319-en
General
-
Target
df243b661ab5ee3c2a713cf9c90bf242
-
Size
5.1MB
-
MD5
df243b661ab5ee3c2a713cf9c90bf242
-
SHA1
a5065c99c306032b98a4f7c47d7eb2bc577bc51b
-
SHA256
166a413962b26828996b1c09366e0941a01fc34d71779b6f53922aa7af563b49
-
SHA512
60a41cd85f25e7cf9cb05463b225d7fb7dd15c5b82cb528179a6d855ec2507b73f5a26b315921b7d57bba0d74073bebf02356a904191fdc2202a1dcf52a2f122
-
SSDEEP
98304:MDz80YOFiCcYe4Ip+y30g2yOEjjs9/g3:v0YOQb4TZUju/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df243b661ab5ee3c2a713cf9c90bf242
Files
-
df243b661ab5ee3c2a713cf9c90bf242.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE