Behavioral task
behavioral1
Sample
db29525f0b64e06b9373cae4c504f34be1ee7598abe4b016f734010020fbddee.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db29525f0b64e06b9373cae4c504f34be1ee7598abe4b016f734010020fbddee.exe
Resource
win10v2004-20240802-en
General
-
Target
db29525f0b64e06b9373cae4c504f34be1ee7598abe4b016f734010020fbddee
-
Size
10.0MB
-
MD5
a0ce88ff14c5c91afdc58556cde967f2
-
SHA1
75bc2d85ecd56032662e2dc500c32c27ad804ad7
-
SHA256
db29525f0b64e06b9373cae4c504f34be1ee7598abe4b016f734010020fbddee
-
SHA512
be0bd9f007e88a481de24bbdab42908a74dea2da90de833ce56428a3e2aacedfcd01f82b4816ca0c6008a699517347722365174b1b0d02c6ad56bab9b49b8afa
-
SSDEEP
196608:6N0GC82C+vYt/u4NksG9LvuRU7D7yS2YuVqjSRx1bgXBeNDNtPctRdsQ8P8YJ2aj:K0M2HvYt/rNkseLl/7yS25qu9oKNRcty
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db29525f0b64e06b9373cae4c504f34be1ee7598abe4b016f734010020fbddee
Files
-
db29525f0b64e06b9373cae4c504f34be1ee7598abe4b016f734010020fbddee.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60.5MB - Virtual size: 60.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE