Behavioral task
behavioral1
Sample
dfe9c84cd8e01979ed62321c3b6f9717.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfe9c84cd8e01979ed62321c3b6f9717.exe
Resource
win10v2004-20240226-en
General
-
Target
dfe9c84cd8e01979ed62321c3b6f9717
-
Size
2.7MB
-
MD5
dfe9c84cd8e01979ed62321c3b6f9717
-
SHA1
0548304f591c8436dafb47aa5c8919981ab1682c
-
SHA256
63a2e20905c60757cb1c5ea06c71712915b4c86df820a6ab537cbdd3a4ab06a1
-
SHA512
efd8dc241d2c037e5fc5a23b34f9935fb568a7b017dd4d6746dda20bd4522edf7e9f80976a915f0a1212c49879a8132fa2f1051a5cac69ea0bbc734cba2d3517
-
SSDEEP
49152:dBt9xNErn/rXzKvv7Xe22lwXkggwotLDYVXPcw2ugSjSG9:N9XAniLXelOg55DQUw2ugS2G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe9c84cd8e01979ed62321c3b6f9717
Files
-
dfe9c84cd8e01979ed62321c3b6f9717.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE