Behavioral task
behavioral1
Sample
af81c387f535dcedf4a61a286375cc86.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
af81c387f535dcedf4a61a286375cc86.exe
Resource
win10v2004-20231215-en
General
-
Target
af81c387f535dcedf4a61a286375cc86
-
Size
323KB
-
MD5
af81c387f535dcedf4a61a286375cc86
-
SHA1
65c9d5a7403e97f241929571d4d7af8b8e2f179f
-
SHA256
e76b6f82d001c2b69d64004e38f505e352e69efa8afbf1f3f5f47a08778340d0
-
SHA512
a1fbbb9c24ac93de72f5d3e259b35bc526a56cfeeddd895e9d61a6fe98c05afbae8fc6054d0172b5d20aa2d41e8a01c149a97a4d5e098222e5de57440c0a0c87
-
SSDEEP
6144:/PD0Zh5QmWlk3PvK4NWT02wWXhibmUdHsTUz0jYuFsqxFtD:/PDyzQmSk3PvKcOwiYbmUIjYuFsWz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af81c387f535dcedf4a61a286375cc86
Files
-
af81c387f535dcedf4a61a286375cc86.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE