Behavioral task
behavioral1
Sample
afbfa36ef1b35056dc98c92ab0b59efbcf92695f6fcd338f7bf1baebabb8ae37.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
afbfa36ef1b35056dc98c92ab0b59efbcf92695f6fcd338f7bf1baebabb8ae37.exe
Resource
win10v2004-20230915-en
General
-
Target
afbfa36ef1b35056dc98c92ab0b59efbcf92695f6fcd338f7bf1baebabb8ae37
-
Size
6.4MB
-
MD5
11c3e6b5c65c825da6267e6565f7b104
-
SHA1
17a414405c21326c2b9b590d3fd143c8ef1bb8a5
-
SHA256
afbfa36ef1b35056dc98c92ab0b59efbcf92695f6fcd338f7bf1baebabb8ae37
-
SHA512
8431fed1d3ec1c41729586fe3ca725f51017a75b8cfb5f0373949807aa44494a347ce416b3a8f8d635b2a03b9f1d07cf913729783616419880840d00c31562f9
-
SSDEEP
24576:+Vq3aDNz9Rm+jHSlo1S2zWYI5H4AhPcTHSZZHrXI/LtfWYi6zOI:+V0kymQaWYMYUPmH6FgZ+YZzO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afbfa36ef1b35056dc98c92ab0b59efbcf92695f6fcd338f7bf1baebabb8ae37
Files
-
afbfa36ef1b35056dc98c92ab0b59efbcf92695f6fcd338f7bf1baebabb8ae37.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fxIޣu_ Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE