Behavioral task
behavioral1
Sample
df73af2802fa1478eaa1809da3c286c3c837c2406ee7558419837e1f00c5723a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
df73af2802fa1478eaa1809da3c286c3c837c2406ee7558419837e1f00c5723a.exe
Resource
win10v2004-20240508-en
General
-
Target
df73af2802fa1478eaa1809da3c286c3c837c2406ee7558419837e1f00c5723a
-
Size
418KB
-
MD5
ec9b2c5b6a0a0ce79829ad0fc6b35fcd
-
SHA1
d7b6c9ecaadda19fff6131a3409b95b540e437c5
-
SHA256
df73af2802fa1478eaa1809da3c286c3c837c2406ee7558419837e1f00c5723a
-
SHA512
f3c07209d4f96369f6dcc332e3cd1ec4f84729e000d8be232e752d2d8a0aea8ff6df74da07a233766495c66f6bfa036e1ae849389599a519a4e5052b10367e40
-
SSDEEP
12288:KSC6aaGkJUFEUrVwuYLRzWT2ZAyI15Zwj+5UoSb:KSFaa3UFEUry/xWTOAyIRwSK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df73af2802fa1478eaa1809da3c286c3c837c2406ee7558419837e1f00c5723a
Files
-
df73af2802fa1478eaa1809da3c286c3c837c2406ee7558419837e1f00c5723a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 406KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE