Behavioral task
behavioral1
Sample
a003f8f865e1f6d89b83ccaa962e7130.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a003f8f865e1f6d89b83ccaa962e7130.exe
Resource
win10v2004-20231215-en
General
-
Target
a003f8f865e1f6d89b83ccaa962e7130
-
Size
3.9MB
-
MD5
a003f8f865e1f6d89b83ccaa962e7130
-
SHA1
0ee2999fc86452ade0639c71175db7ae970da73f
-
SHA256
6e3868c0c28457656da462b49c0d52f6c674265c911d668766d93f797b129a34
-
SHA512
e4b8b438f638ee23627696fc1d7cc4411b9531ebaeed31a44d39b7957bd24419c6bc47546b69540e1eb1dfe9ea18cf497841a298f8a5729f5bb5a3d342251ebc
-
SSDEEP
98304:c3M2J3eu/CsD2i7D3xkOxYwpKoTwr4ve44goD2i7D3xkOxYwpK0g0jAcL16D2i7p:+hrh7FkNqKo0rkOh7FkNqK0tAh7FkNq/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a003f8f865e1f6d89b83ccaa962e7130
Files
-
a003f8f865e1f6d89b83ccaa962e7130.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE