Behavioral task
behavioral1
Sample
dd2e7cfe90a70efabece8b479a231c8c3ec39617800d1086d919f9d051e3d2e9.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dd2e7cfe90a70efabece8b479a231c8c3ec39617800d1086d919f9d051e3d2e9.exe
Resource
win10v2004-20240508-en
General
-
Target
dd2e7cfe90a70efabece8b479a231c8c3ec39617800d1086d919f9d051e3d2e9
-
Size
11.4MB
-
MD5
2278c923d44ed1506d8baa8b5d9a3446
-
SHA1
d6a8ad008f35aea3c18642504f641984498cc16d
-
SHA256
dd2e7cfe90a70efabece8b479a231c8c3ec39617800d1086d919f9d051e3d2e9
-
SHA512
37af5a621b920e96fb25d00d99d8f143c2ab049f88b1c155a54818869ed49beb22adf868102b134362ac4da06830ade9ac3c2352adb6cae85b20c91110fbe0ca
-
SSDEEP
196608:P5AC4HLKHkUCjp0J8jAyVpy3cw8q5s2VUDkBEkkGVlDElgJxhU2Gy+cSHqsD:P5PHep0JpYCankX/DEw6MGvD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd2e7cfe90a70efabece8b479a231c8c3ec39617800d1086d919f9d051e3d2e9
Files
-
dd2e7cfe90a70efabece8b479a231c8c3ec39617800d1086d919f9d051e3d2e9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 50.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50.3MB - Virtual size: 50.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE