Behavioral task
behavioral1
Sample
df4e66604c1e026398b8e4de91f6a304.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df4e66604c1e026398b8e4de91f6a304.exe
Resource
win10v2004-20240226-en
General
-
Target
df4e66604c1e026398b8e4de91f6a304
-
Size
501KB
-
MD5
df4e66604c1e026398b8e4de91f6a304
-
SHA1
ac6a502be863a92ab4171bd612297ad47bdb540a
-
SHA256
bb74868c5b16bc43881ab1d044947f28f414e9654137fd8790cb30815eb5c224
-
SHA512
5643116a2c69974582769fe3815bd2ec5df6f55ecfa73449bab971e172232340abe79296ffcc6df7de3cbcae56041d93f2552770efa48a61f8ecc6c0d8d52095
-
SSDEEP
12288:blTZvkE7oZH5C7KeHNc+1c2TEPUwbCyYSHFa7rC:JV7oZH5CBHS2IPUwbCyYX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df4e66604c1e026398b8e4de91f6a304
Files
-
df4e66604c1e026398b8e4de91f6a304.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE