Behavioral task
behavioral1
Sample
d3d7c793b04bbc203efd849a3e750a794b7ffe0a06a7dbe7a69d12857d6043cf.exe
Resource
win7-20240704-en
General
-
Target
d3d7c793b04bbc203efd849a3e750a794b7ffe0a06a7dbe7a69d12857d6043cf
-
Size
62KB
-
MD5
b68dc8b718bc8d2516b256be330047aa
-
SHA1
54234132a7a4a5c75e3a621dbc2c466864ac4d27
-
SHA256
d3d7c793b04bbc203efd849a3e750a794b7ffe0a06a7dbe7a69d12857d6043cf
-
SHA512
0461209849dc404b7bbd466aed3e1ee62423b91a8c05c853f696217ae077353f22bb3821c2fad4ec27d9ff6db0578beea4c813d9984a62c5657d284ac89a2ed4
-
SSDEEP
1536:tvQBeOGtrYS3srx93UBWfwC6Ggnouy8gA2l5CcSguix:thOmTsF93UYfwC6GIoutgVocS8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d7c793b04bbc203efd849a3e750a794b7ffe0a06a7dbe7a69d12857d6043cf
Files
-
d3d7c793b04bbc203efd849a3e750a794b7ffe0a06a7dbe7a69d12857d6043cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.sdata Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE