Behavioral task
behavioral1
Sample
df8695b310cfbc0f5d1ffa2d3bd499e2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df8695b310cfbc0f5d1ffa2d3bd499e2.exe
Resource
win10v2004-20240226-en
General
-
Target
df8695b310cfbc0f5d1ffa2d3bd499e2
-
Size
212KB
-
MD5
df8695b310cfbc0f5d1ffa2d3bd499e2
-
SHA1
2a2d504bac87733ea92af314209ad754029516e1
-
SHA256
de3b861fc3812a34931bfe148547239ec73038be7c989bdf12a69f5f26afd4b3
-
SHA512
bc54c47865146e867d27157fecd965bd35f47e6ce8601ee47daa0833bae8a82610c598c311a5ea853eba14c45ee72b4eea1bad89c47d89617fd7b637495c3a19
-
SSDEEP
6144:g2eGtJDwRw8sWUFjlrtnklBn1PfAVPMabUiIoS:LJTzLncBKSAFIoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df8695b310cfbc0f5d1ffa2d3bd499e2
Files
-
df8695b310cfbc0f5d1ffa2d3bd499e2.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE