Behavioral task
behavioral1
Sample
dfb95ff8292f962471ba871efdbefaaf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfb95ff8292f962471ba871efdbefaaf.exe
Resource
win10v2004-20240226-en
General
-
Target
dfb95ff8292f962471ba871efdbefaaf
-
Size
1003KB
-
MD5
dfb95ff8292f962471ba871efdbefaaf
-
SHA1
781c0c284e39e39b94c5b3d7e05ce803082bf1f8
-
SHA256
712c1df3975098d7c7ff68458bb6d5c2eb7186fbcc0d1f4b145adaafa768f180
-
SHA512
93c3d576adc6ba624b3be2a3158c347ecfec6d14067e832731672d4d9c3e38e2957f21a29971bc4c85f2c664165f676e13998104b01a79d8e6976eac88a201b3
-
SSDEEP
24576:Rigo6TqEzs74WgHlNa0erkZdEx3Knx6Y6:Ygo6T7zm4WgHlNBerkZdEx3Kns
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfb95ff8292f962471ba871efdbefaaf
Files
-
dfb95ff8292f962471ba871efdbefaaf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE