Behavioral task
behavioral1
Sample
ddeec6d9c27067a3475e1684dc5dec41c40aef6e6f3c20b370251d47fe6d5870.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ddeec6d9c27067a3475e1684dc5dec41c40aef6e6f3c20b370251d47fe6d5870.exe
Resource
win10v2004-20240704-en
General
-
Target
ddeec6d9c27067a3475e1684dc5dec41c40aef6e6f3c20b370251d47fe6d5870
-
Size
156KB
-
MD5
4c10ddf99055b8107ae86120097be7c8
-
SHA1
143334f8dea165a0284d3316068f31e73413509c
-
SHA256
ddeec6d9c27067a3475e1684dc5dec41c40aef6e6f3c20b370251d47fe6d5870
-
SHA512
794a88259d1859ee164f0cd0b60cb37327a30123afd39f59544878a6c17c7aa30ef4c4b7df697812a25897ff909c9cec9268db8990e590ffedd628dd1401440a
-
SSDEEP
3072:enaym3AIuZAIus0J03XV/ERbeoxKubAuOH1XbJVLHfTYjkNsVeuVVpgtUXLZ2tDV:wHm3AIuZAIudm3XV/ERbeoxKubAuOH1X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddeec6d9c27067a3475e1684dc5dec41c40aef6e6f3c20b370251d47fe6d5870
Files
-
ddeec6d9c27067a3475e1684dc5dec41c40aef6e6f3c20b370251d47fe6d5870.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE