Behavioral task
behavioral1
Sample
dbdc57e8557ff92caa80eb179bcd5c3a5df614b0cda5f57e0e513d73083325f2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbdc57e8557ff92caa80eb179bcd5c3a5df614b0cda5f57e0e513d73083325f2N.exe
Resource
win10v2004-20241007-en
General
-
Target
dbdc57e8557ff92caa80eb179bcd5c3a5df614b0cda5f57e0e513d73083325f2N.exe
-
Size
36KB
-
MD5
d78079e76889aa2c79862836ac54c1e0
-
SHA1
5dd4f62eb37908c76d1a6c08be2f569722a9c42f
-
SHA256
dbdc57e8557ff92caa80eb179bcd5c3a5df614b0cda5f57e0e513d73083325f2
-
SHA512
568310d52e41c3595f59099fd4b7b8e80cf7600ec5d367304e0418c5fefd9240043a214349abfdd3e7d461231036716f60105e8bf0a3a2c05d839ffaf92aff22
-
SSDEEP
768:SCIqdH/k1ZVcT194jp4673tU9bF69+DReh517f9t8hXN:SNqaLV8a6673tU9b0cDQBfU1N
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule static1/unpack001/out.upx family_mydoom -
Mydoom family
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dbdc57e8557ff92caa80eb179bcd5c3a5df614b0cda5f57e0e513d73083325f2N.exe unpack001/out.upx
Files
-
dbdc57e8557ff92caa80eb179bcd5c3a5df614b0cda5f57e0e513d73083325f2N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ