Behavioral task
behavioral1
Sample
ddcd735b3a12905631719fdc7d0f504cd848f170f6d9ee272a6fc1ea8911e5a7.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ddcd735b3a12905631719fdc7d0f504cd848f170f6d9ee272a6fc1ea8911e5a7.exe
Resource
win10v2004-20240508-en
General
-
Target
ddcd735b3a12905631719fdc7d0f504cd848f170f6d9ee272a6fc1ea8911e5a7
-
Size
150KB
-
MD5
525a82e432e42b33fecc789afe4d8dc4
-
SHA1
e1bbb251063de00cf8682b5212572c35cab122cc
-
SHA256
ddcd735b3a12905631719fdc7d0f504cd848f170f6d9ee272a6fc1ea8911e5a7
-
SHA512
d1eb106b65ddf1542278d7d690810cf5896fb9e9d9661bac36c8ba3b2803c5d9880a406485865dc173fd7b108d8a8235e43b0a9ef8d2ec6db54131eea191c87e
-
SSDEEP
1536:67Zf/FAxTWY1++PJHJXA/OsIZVljFEwOxW3o/v7V+X:+nyiCljKwOgob4
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddcd735b3a12905631719fdc7d0f504cd848f170f6d9ee272a6fc1ea8911e5a7
Files
-
ddcd735b3a12905631719fdc7d0f504cd848f170f6d9ee272a6fc1ea8911e5a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE