General
-
Target
alartecfrm.exe
-
Size
198KB
-
MD5
71975f21c1f6f800622ae8dda5095e67
-
SHA1
ca3ed531f54446cf056d54e131009d2965b3c407
-
SHA256
3488fec8d6a3f8201e0055395d51c6731c695df4edfbe835d471834582ebb0a3
-
SHA512
77be40767c9b7b41872cb7abed9084a3c9456ee607a88cdb4d2715de2c96c32adc682aecec850c49373ac35215bc951d469b1c2bb2c037c75e3808b944f276e9
-
SSDEEP
3072:KJHuEh2188SWaN6h6aUswhe0HLnnH8jVs6VYtFeLRUvhySF9VradNKa+SLt9DO6H:YvhjzWuuJSwuLncJs62MSU6RSL4Vs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource alartecfrm.exe
Files
-
alartecfrm.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE