Behavioral task
behavioral1
Sample
df59799335fe0feba5a76dd8a0147c88.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
df59799335fe0feba5a76dd8a0147c88.exe
Resource
win10v2004-20240226-en
General
-
Target
df59799335fe0feba5a76dd8a0147c88
-
Size
266KB
-
MD5
df59799335fe0feba5a76dd8a0147c88
-
SHA1
e3847a6d9d495d24be9026d828040afa6a4a062c
-
SHA256
2fd50471e1c62eae4a1e491f317f245e09a5ded40cabcc6af10dfabb2d79afcc
-
SHA512
730f1eed54501a0ec24ae1d3a9a2c5c3b1055311b81b4461746459770b7ad9bb08e3cbb40d6831c20aa42dec0930f4482a77b057be63bb0f718afa5b3ce4edbe
-
SSDEEP
6144:iwhlmbT/DnT+xQ/Puj7REr9Ts7WHYpqnzSrYFUsXuS78XoQ:lhqDSQg7RUtsyaqAYWs+FXB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df59799335fe0feba5a76dd8a0147c88
Files
-
df59799335fe0feba5a76dd8a0147c88.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE