Behavioral task
behavioral1
Sample
de94f9b2c235d26b6bc9a9902b43a2e2e9eaf8c507918f35fdf2c7a53d24d1b2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de94f9b2c235d26b6bc9a9902b43a2e2e9eaf8c507918f35fdf2c7a53d24d1b2.exe
Resource
win10v2004-20240426-en
General
-
Target
de94f9b2c235d26b6bc9a9902b43a2e2e9eaf8c507918f35fdf2c7a53d24d1b2
-
Size
1.4MB
-
MD5
d58e7614740c91fc9906a95cc4e05269
-
SHA1
fdc11e4b7c6b5d37a3e2d8885b032d1921f500df
-
SHA256
de94f9b2c235d26b6bc9a9902b43a2e2e9eaf8c507918f35fdf2c7a53d24d1b2
-
SHA512
140b801473aba0fc2e369672672f3c264309b8b2db7475fc709531d119399e72e1e191d0224bc50bf6e90cdd5b905fa37c17f138feaa3abec464372316b8e973
-
SSDEEP
12288:VI3B0S/OGv44Ys//kUU+kfIMEB2gqITLDk7oSV/rQk3:hS/OEBz/6+GdEB2gqITLDk7zQk3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de94f9b2c235d26b6bc9a9902b43a2e2e9eaf8c507918f35fdf2c7a53d24d1b2
Files
-
de94f9b2c235d26b6bc9a9902b43a2e2e9eaf8c507918f35fdf2c7a53d24d1b2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE