Behavioral task
behavioral1
Sample
df80d277ca45e29499b50e8855ae6e1d.exe
Resource
win7-20240220-en
General
-
Target
df80d277ca45e29499b50e8855ae6e1d
-
Size
1.5MB
-
MD5
df80d277ca45e29499b50e8855ae6e1d
-
SHA1
40fcb332428a34d8891a93a439639c95e67b54c4
-
SHA256
b9fd42da434cc5c9d699387cc977474b7d23c59ad72a0839d2cb4c0d2274206c
-
SHA512
08384e2a092991d3e673f3b174afe1c02325aace9031281ce3e684ddf8f3d5b09e2cbb2d1614248c343fc0d86c6a3d5004ba6accb8fdb006d4e673d6baf8a43d
-
SSDEEP
49152:4l80jNzkPUQSMsFRrEDH+W1gcsFWOHPA+1ltzMu:o6jSMsFRYnaFWg7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df80d277ca45e29499b50e8855ae6e1d
Files
-
df80d277ca45e29499b50e8855ae6e1d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE