Behavioral task
behavioral1
Sample
a838819ad1dba9456b102babc1430865922b13961080f73924f28d6996ced232.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a838819ad1dba9456b102babc1430865922b13961080f73924f28d6996ced232.exe
Resource
win10v2004-20230703-en
General
-
Target
a838819ad1dba9456b102babc1430865922b13961080f73924f28d6996ced232
-
Size
899KB
-
MD5
61f00eafb3905f6e505142ab1e694c3a
-
SHA1
bcfa42e16c0d3ec93ec264660eaf5980b318e124
-
SHA256
a838819ad1dba9456b102babc1430865922b13961080f73924f28d6996ced232
-
SHA512
cb5f5396cb8e52e1dace19c289a642fc42bbc04c0428cf50d04ca195064f2b9a0e4e216b4f8f5d26f4cc7261980ca2b150c79362090ebfab386bdc845ce0364d
-
SSDEEP
24576:GmDCNikCJG62AmQ2thek1VLFxty2wHV3ldp:GmDCNiNG/btPjLNMH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a838819ad1dba9456b102babc1430865922b13961080f73924f28d6996ced232
Files
-
a838819ad1dba9456b102babc1430865922b13961080f73924f28d6996ced232.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 877KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE