Behavioral task
behavioral1
Sample
ddde4b90f49b2947101d93cf21b792c5a84d2dc3dcf118c772080102d47da639.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ddde4b90f49b2947101d93cf21b792c5a84d2dc3dcf118c772080102d47da639.exe
Resource
win10v2004-20240611-en
General
-
Target
ddde4b90f49b2947101d93cf21b792c5a84d2dc3dcf118c772080102d47da639
-
Size
32KB
-
MD5
94404493d6e39820b1433e5e406b1cfc
-
SHA1
98a772e6a165cfd261337052529060a54cd650ff
-
SHA256
ddde4b90f49b2947101d93cf21b792c5a84d2dc3dcf118c772080102d47da639
-
SHA512
ed6507a572bfeb6ad64769f0e695fd040458e625b56b4d38c6e10f5b989d51dbdee36df3cca192d157846dfbdee1c91aa8f4fab343f18a2faf95f8e3803bf4f9
-
SSDEEP
384:CxL+q5r+PpHfXhUkKvI4QwjQ/vFJhheJ06oZrj/vBKDJZXTJeqNxjTYIz:ua4r+PpHfXGLOnNh8noR+NTJeqfYIz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddde4b90f49b2947101d93cf21b792c5a84d2dc3dcf118c772080102d47da639
Files
-
ddde4b90f49b2947101d93cf21b792c5a84d2dc3dcf118c772080102d47da639.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE