Behavioral task
behavioral1
Sample
df6694fb4512c580f9b1a2a3e17c4f59.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
df6694fb4512c580f9b1a2a3e17c4f59.exe
Resource
win10v2004-20240226-en
General
-
Target
df6694fb4512c580f9b1a2a3e17c4f59
-
Size
75KB
-
MD5
df6694fb4512c580f9b1a2a3e17c4f59
-
SHA1
744153ad8d808e156b165bdc1898960b8f2db61c
-
SHA256
f401153bbaf541b28b7705c57f6e7a6dbe2e8880f1a04ee7aa63a1c8071d37d8
-
SHA512
4cc45148b902099cfe75b168847edf7b85c0596594765803a768a1f9b712c969d9687315a8bf1d3f83250b84dfdff99f07b4b8825a297d9362474de6040b91a4
-
SSDEEP
1536:SKcR4mjD9r823FHKcR4mjD9r823F2+gKyHwVmI8Zf9XiOJVV7d:SKcWmjRrz3ZKcWmjRrz39yH0Lwf9zXx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df6694fb4512c580f9b1a2a3e17c4f59
Files
-
df6694fb4512c580f9b1a2a3e17c4f59.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE