Behavioral task
behavioral1
Sample
dff61e93aa11c2b7ad6a2a751c349ba4.exe
Resource
win7-20240221-en
General
-
Target
dff61e93aa11c2b7ad6a2a751c349ba4
-
Size
180KB
-
MD5
dff61e93aa11c2b7ad6a2a751c349ba4
-
SHA1
30e2bf1f1941ddb78c0a6a94f8d4faf516331654
-
SHA256
4ce4c6be9047906d780fcee638dc5fce92a790c8185ae2a198f03edc825354dc
-
SHA512
8247a1a9af18e0a533a66e61253ac943a087fb4de478218da3a4fa3d247f12203e8e5fd4455b3684669f4a9e4bcb6b1554b450f570df70390dfa84c9fc0cc8cd
-
SSDEEP
3072:dwHi+R3eBewbLFjWqNxg5X2M1GrO7P/aOZC57iEOg6A6aclpHsczyIJ:6zsbLFLNxgp2q27xOk6VrhyI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dff61e93aa11c2b7ad6a2a751c349ba4
Files
-
dff61e93aa11c2b7ad6a2a751c349ba4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sgdyqyu Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kfcirrb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE