Behavioral task
behavioral1
Sample
daffaa8aa88301a6057a8bc0b5476440N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daffaa8aa88301a6057a8bc0b5476440N.exe
Resource
win10v2004-20240802-en
General
-
Target
daffaa8aa88301a6057a8bc0b5476440N.exe
-
Size
565KB
-
MD5
daffaa8aa88301a6057a8bc0b5476440
-
SHA1
be296cef268ee69edd1837643cb6aef0216d0113
-
SHA256
db992bbf81476a28b0f0b33030cc6321a7da66522e0532743f0cef7f7d47605c
-
SHA512
0e0dcae2b8b92777beeb1ca3e28b8b13a1288ce9c77fed6074afbed50c4c72eb9b34c5cf3ef930dbd4f50bc43c86d6821ab3d5b5cef2abd9d396972f37a2c3c4
-
SSDEEP
12288:HRuJOPMdl5b/wn0Z147JaYCT77MNXYnno/2R:wRxnrF74Yo/2R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daffaa8aa88301a6057a8bc0b5476440N.exe
Files
-
daffaa8aa88301a6057a8bc0b5476440N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE