Behavioral task
behavioral1
Sample
dd04e712e76ef9464a3dd8a9e5d5270cbaac4297f5119a22a34cb3830948eba5.exe
Resource
win7-20240903-en
General
-
Target
dd04e712e76ef9464a3dd8a9e5d5270cbaac4297f5119a22a34cb3830948eba5.exe
-
Size
89KB
-
MD5
9cd66ba356fa68124d8586ef0710d45f
-
SHA1
f9fbf3d1ef5e2274862a09e8562fb6c0f3690181
-
SHA256
dd04e712e76ef9464a3dd8a9e5d5270cbaac4297f5119a22a34cb3830948eba5
-
SHA512
ddc36da9f803c43998e9b3b30d141ffe809eee389ffe062684edc2103543b4fe6f934b2a28cc5a5dd613c0430dc41cbcdc5bdfcb04c9ce7ce844f6407881f2e0
-
SSDEEP
1536:O1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox76:u+4MJIkLZJNAQ9Jo96
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd04e712e76ef9464a3dd8a9e5d5270cbaac4297f5119a22a34cb3830948eba5.exe
Files
-
dd04e712e76ef9464a3dd8a9e5d5270cbaac4297f5119a22a34cb3830948eba5.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE