Behavioral task
behavioral1
Sample
dfe00492978ed4b16c0c8d15aa4320ac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfe00492978ed4b16c0c8d15aa4320ac.exe
Resource
win10v2004-20240226-en
General
-
Target
dfe00492978ed4b16c0c8d15aa4320ac
-
Size
123KB
-
MD5
dfe00492978ed4b16c0c8d15aa4320ac
-
SHA1
a6f6c382149fabe9191d317162e10820604e8ca6
-
SHA256
22bb94587cd1e9aac399d4409e7345dec08d99a4fca0655f1a3f3a0a0fa04cc4
-
SHA512
e15b97c80d6625ba2ae0bed1172698306034f574a6eefc49ba61e5c487d0842908e66505cbbb4a2252772cf4decd2fc1b595c712f1a3c79d42b31f01062d51da
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLrrD6:OVYrJrOSsRwcpNrD6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe00492978ed4b16c0c8d15aa4320ac
Files
-
dfe00492978ed4b16c0c8d15aa4320ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ