Behavioral task
behavioral1
Sample
dd5ba7ec4c68d5fa7fcc6010fe39cb58738751bcfea963f43f9859b370bb0585.exe
Resource
win10v2004-20240709-en
General
-
Target
dd5ba7ec4c68d5fa7fcc6010fe39cb58738751bcfea963f43f9859b370bb0585
-
Size
133KB
-
MD5
61b71b5ce63e1e81963dfdbfab01c27d
-
SHA1
f87b0998d7a9ed3d2d7a418ffbb91af5607e2a45
-
SHA256
dd5ba7ec4c68d5fa7fcc6010fe39cb58738751bcfea963f43f9859b370bb0585
-
SHA512
5d303ab8837b9c11c7602074465c9e1070ca5983ca52af0aa2eace21d0b33be9e3ab77ced5b84c880cd563f285931cd5c0cf43d9a122ef49e9498923674c1ed8
-
SSDEEP
3072:DhePoXwb7BUhpPus9ql2GtLHRYCGcdoJ+4BkaO+MXN4hwtBFuMnouti:wPR7BKy4GtLHWCGcWJ+G2XL1oSi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5ba7ec4c68d5fa7fcc6010fe39cb58738751bcfea963f43f9859b370bb0585
Files
-
dd5ba7ec4c68d5fa7fcc6010fe39cb58738751bcfea963f43f9859b370bb0585.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ