Behavioral task
behavioral1
Sample
dfd281c4ab1967a60cf3ec42e3358490.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
dfd281c4ab1967a60cf3ec42e3358490.exe
Resource
win10v2004-20240226-en
General
-
Target
dfd281c4ab1967a60cf3ec42e3358490
-
Size
123KB
-
MD5
dfd281c4ab1967a60cf3ec42e3358490
-
SHA1
430fa31ddd5598a47f5235e073b3b0a59b5e76ca
-
SHA256
6c589a8e3b0359586bdb74f5040122c0d9b6661993f34ab1811fae07ad4a5403
-
SHA512
ca50e7ba1f6a45a35d5ab892ac636b1d5c4ef912ef9237abe95f3d6b1db102234a796f7c4427f28e53d34d240f9f7e31d378cc010caf33b829466c291d3d9fd2
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLK3D:OVYrJrOSsRwcpgD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfd281c4ab1967a60cf3ec42e3358490
Files
-
dfd281c4ab1967a60cf3ec42e3358490.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ