Behavioral task
behavioral1
Sample
0fdcae7df11b5aba33b8c606ad460a016491c5e7881939c28fa72eb22d888f48.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0fdcae7df11b5aba33b8c606ad460a016491c5e7881939c28fa72eb22d888f48.exe
Resource
win10v2004-20240802-en
General
-
Target
0fdcae7df11b5aba33b8c606ad460a016491c5e7881939c28fa72eb22d888f48
-
Size
56KB
-
MD5
797985ec5ad15466f1368bfa40ca100b
-
SHA1
32aa9db61ced1c7fba486fe1b43c08276fd9e413
-
SHA256
0fdcae7df11b5aba33b8c606ad460a016491c5e7881939c28fa72eb22d888f48
-
SHA512
82f7caed41cb560e0d3b17dcefe25388a37651cf3459829f1a4ee4d76daf0ccc24c95363a91ce7d30feaaf02e01582a6a9ddb1bd27b86e4538cf9a3d7a2fce86
-
SSDEEP
768:aq9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfTH0KoWNkP:aqk/Zdic/qjh8MJDH++vCVKLN2
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fdcae7df11b5aba33b8c606ad460a016491c5e7881939c28fa72eb22d888f48
Files
-
0fdcae7df11b5aba33b8c606ad460a016491c5e7881939c28fa72eb22d888f48.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE