Behavioral task
behavioral1
Sample
d5041cd07c147b16f0c0b7757f301844256e3b5acde7e73b9ea86117537aa7a5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d5041cd07c147b16f0c0b7757f301844256e3b5acde7e73b9ea86117537aa7a5.exe
Resource
win10v2004-20240704-en
General
-
Target
d5041cd07c147b16f0c0b7757f301844256e3b5acde7e73b9ea86117537aa7a5
-
Size
1.8MB
-
MD5
bcc532c551ee9cf0d562275396b2f342
-
SHA1
cf076cbe3da8c5ed041fd04002fc4b8167ffd20d
-
SHA256
d5041cd07c147b16f0c0b7757f301844256e3b5acde7e73b9ea86117537aa7a5
-
SHA512
f350a61c2e2d24679a7320a660fed5bd415aaf08a26128b8d709651a87064dd94e4d7e45b3a8fa59438bcdbfe9f2476312745fa935f0b992e6f51608a03fd72f
-
SSDEEP
49152:A//ZNz0Je+8/vvZaaPf09CwE0CnGps1QaybrDgW:sNwJ+ZBf09Ct0FbPgW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5041cd07c147b16f0c0b7757f301844256e3b5acde7e73b9ea86117537aa7a5
Files
-
d5041cd07c147b16f0c0b7757f301844256e3b5acde7e73b9ea86117537aa7a5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB