Behavioral task
behavioral1
Sample
ddbd64cda2b6c6339cc2fe9defa8d96b610a2e2e913040114af7dad02563dce1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ddbd64cda2b6c6339cc2fe9defa8d96b610a2e2e913040114af7dad02563dce1.exe
Resource
win10v2004-20240802-en
General
-
Target
ddbd64cda2b6c6339cc2fe9defa8d96b610a2e2e913040114af7dad02563dce1
-
Size
655KB
-
MD5
90033e3de799cc72894257632c7e895c
-
SHA1
688db04d1e35f8e97937599ff09c7e379c74a6d3
-
SHA256
ddbd64cda2b6c6339cc2fe9defa8d96b610a2e2e913040114af7dad02563dce1
-
SHA512
5259407b97ef015ce50fcda3243afabf066421a68110c9ad31591a98eb6401554344abd0bf55bd42a3997517c5f442e992198cc68a9e6a42cea883c7a97101db
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFi:1HNJDMor12mquPZjq4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddbd64cda2b6c6339cc2fe9defa8d96b610a2e2e913040114af7dad02563dce1
Files
-
ddbd64cda2b6c6339cc2fe9defa8d96b610a2e2e913040114af7dad02563dce1.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE