Behavioral task
behavioral1
Sample
df54b827621df523eee81bac6c4cb7fd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df54b827621df523eee81bac6c4cb7fd.exe
Resource
win10v2004-20240226-en
General
-
Target
df54b827621df523eee81bac6c4cb7fd
-
Size
123KB
-
MD5
df54b827621df523eee81bac6c4cb7fd
-
SHA1
c52c6955252438ab5cf16c33823adfe78763284c
-
SHA256
06f3d20030272ab1f5bac389e0307c8e8e5568b2c7741ca3359238504bb37e91
-
SHA512
364e4fe1b48a0ff3bf2a46951884f3a04c2dc74bc4db67ad9bde997b99061aa4c36ea905d91c8ad2e1b16cc8e6d92a202977205b2d3498a980622a173ad2fc8d
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLnOXzo:OVYrJrOSsRwcplOE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df54b827621df523eee81bac6c4cb7fd
Files
-
df54b827621df523eee81bac6c4cb7fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ