Behavioral task
behavioral1
Sample
dc1519a47a0eb2a3e5ed7a8c0118a175e71ad1417abfa558af57c842329ca34d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dc1519a47a0eb2a3e5ed7a8c0118a175e71ad1417abfa558af57c842329ca34d.exe
Resource
win10v2004-20240611-en
General
-
Target
dc1519a47a0eb2a3e5ed7a8c0118a175e71ad1417abfa558af57c842329ca34d
-
Size
2.5MB
-
MD5
151f6144ab7294fbd26739a9343c15ff
-
SHA1
cfd16865894f98bafe1147370b3f3c229bf96355
-
SHA256
dc1519a47a0eb2a3e5ed7a8c0118a175e71ad1417abfa558af57c842329ca34d
-
SHA512
5726006c40a3ddf7ee2ba63c8c0bb33eb8d402d1622e10e319241c2241473cf33e2f0c30e837f4de5994a27dd6e474f103e5d07e16c894129ceb331092c0897b
-
SSDEEP
49152:6GAbVayYOeHX7dMnwqHiO6BxN0YfSqu2J25qVhzmuh22k:6UHx1gCNQUUGNhDk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc1519a47a0eb2a3e5ed7a8c0118a175e71ad1417abfa558af57c842329ca34d
Files
-
dc1519a47a0eb2a3e5ed7a8c0118a175e71ad1417abfa558af57c842329ca34d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE