Behavioral task
behavioral1
Sample
d6c37c09e5eb361f7fd29478247c85548f9bf48ef713ff5dc7d5ab6806232152.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6c37c09e5eb361f7fd29478247c85548f9bf48ef713ff5dc7d5ab6806232152.exe
Resource
win10v2004-20241007-en
General
-
Target
d6c37c09e5eb361f7fd29478247c85548f9bf48ef713ff5dc7d5ab6806232152.exe
-
Size
232KB
-
MD5
d077a9f1f54be7f8c48a84869b696b6a
-
SHA1
315d943f5c52bcc81c81592b51fcbc440c0c188a
-
SHA256
d6c37c09e5eb361f7fd29478247c85548f9bf48ef713ff5dc7d5ab6806232152
-
SHA512
bf12e3e3913c6f679c843245665934c6e68644c259158f9da5f96635e8a550ace0ff714f0536fa3cb00a4638b7a7dbc7d9aebb913b8822eb2becd7f9dbc7ce0f
-
SSDEEP
3072:GgPsf9FNTLKAEP1H5OKExtpnDRykNsuckNssgu5HHsAjMssfa/WevdHG+p1vz:GguDtLKAECxtpnFFkyMdsea/Zm+Tz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6c37c09e5eb361f7fd29478247c85548f9bf48ef713ff5dc7d5ab6806232152.exe
Files
-
d6c37c09e5eb361f7fd29478247c85548f9bf48ef713ff5dc7d5ab6806232152.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 16.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16.5MB - Virtual size: 16.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE