Behavioral task
behavioral1
Sample
dfaf89b2a9794dec10b09a2dcac2c144.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dfaf89b2a9794dec10b09a2dcac2c144.exe
Resource
win10v2004-20240226-en
General
-
Target
dfaf89b2a9794dec10b09a2dcac2c144
-
Size
123KB
-
MD5
dfaf89b2a9794dec10b09a2dcac2c144
-
SHA1
dfc08b23f183ed8fbd768efde143f0a5bd0493e6
-
SHA256
9a7d5edb7372e476d81a7b796d41f92e1d526fc7308fcbc38e159badddbf9e25
-
SHA512
ad15e8770f0473316695a6f60aab53bd0c39abb243fb66309c2d37d9dce7a313014e4882bdc76d59f6b2f50ebd8d47938d52d47af930fb7110f8fc2f45b6b67a
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLN8DxIgD6:OVYrJrOSsRwcp3AygO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfaf89b2a9794dec10b09a2dcac2c144
Files
-
dfaf89b2a9794dec10b09a2dcac2c144.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ