Behavioral task
behavioral1
Sample
d581408d762c6f2057fdd40114dfa23e9eee47718fd7954c6d4cb82414b1908f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d581408d762c6f2057fdd40114dfa23e9eee47718fd7954c6d4cb82414b1908f.exe
Resource
win10v2004-20240508-en
General
-
Target
d581408d762c6f2057fdd40114dfa23e9eee47718fd7954c6d4cb82414b1908f
-
Size
209KB
-
MD5
59c94295e333cafd4c46731f93b98a86
-
SHA1
c09cdf25dc30c4de632fe41daffedb91c43564cd
-
SHA256
d581408d762c6f2057fdd40114dfa23e9eee47718fd7954c6d4cb82414b1908f
-
SHA512
9ee3b79bc2d4eff9a9073caeda92347dc0380d7c7e1ed1f4e8c1c7b83aa5d89aa333cc911efbe84a34064bcc53f6f9afcc7a3860593eeac92a0efa2075efb467
-
SSDEEP
6144:p1euaR8KQYGC31We+WwAQVzrNSTXtpAoVLoS:pkhjhP31V+WJQzEvA2LoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d581408d762c6f2057fdd40114dfa23e9eee47718fd7954c6d4cb82414b1908f
Files
-
d581408d762c6f2057fdd40114dfa23e9eee47718fd7954c6d4cb82414b1908f.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE