Behavioral task
behavioral1
Sample
dbff54bccd94a7c8b520ddd810b3f60e10062e4e6c5b4b8253af219c302ce775.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbff54bccd94a7c8b520ddd810b3f60e10062e4e6c5b4b8253af219c302ce775.exe
Resource
win10v2004-20240611-en
General
-
Target
dbff54bccd94a7c8b520ddd810b3f60e10062e4e6c5b4b8253af219c302ce775
-
Size
15.3MB
-
MD5
ec213024db883c59f31d29230d04e183
-
SHA1
52eed4cac3f3958537ca3608ed1f04b661fe33a4
-
SHA256
dbff54bccd94a7c8b520ddd810b3f60e10062e4e6c5b4b8253af219c302ce775
-
SHA512
03c2cc4561d46480724c857528b18e3659596f28c352bdf306c97435e1dd407e3619d12fbc3d3efc9cda2a5c4589fd1d0782d1770bb009fca0e346ae5a3d0818
-
SSDEEP
393216:FmS65tiDeD1wcFAG76BgzjlAgOh4kc8Tl7:SPD1YGmOzjlAgOs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbff54bccd94a7c8b520ddd810b3f60e10062e4e6c5b4b8253af219c302ce775
Files
-
dbff54bccd94a7c8b520ddd810b3f60e10062e4e6c5b4b8253af219c302ce775.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 13.2MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE