Behavioral task
behavioral1
Sample
2024-05-27_b2463d9f198c676fa1d3464b3ca8b907_darkside.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-27_b2463d9f198c676fa1d3464b3ca8b907_darkside.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-27_b2463d9f198c676fa1d3464b3ca8b907_darkside
-
Size
18KB
-
MD5
b2463d9f198c676fa1d3464b3ca8b907
-
SHA1
6a726acafad7f6cedb8198efb40900126b1ad86c
-
SHA256
fcf9dc81e75389af868f3807ac8d7b8c58ccfaf972c10f67fec334f2d1d124e4
-
SHA512
f4f4cbbeeaffc36b35e796a811113fea1144def90334b58953fc2419e213affb7454f5d13dffe7b82d50c51ad916ff71e2f49f02e2cc19470d0b333a4c2f032d
-
SSDEEP
384:gGyUrEk/yEoQE+yckIYN/pBa3AWK3T2iTXoHblK6/3iuSuKXY:T4klFypIYFpB/xDjgbrES
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-27_b2463d9f198c676fa1d3464b3ca8b907_darkside
Files
-
2024-05-27_b2463d9f198c676fa1d3464b3ca8b907_darkside.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ