Behavioral task
behavioral1
Sample
a01eb6828a63c929ba8ddecb83d86666.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a01eb6828a63c929ba8ddecb83d86666.exe
Resource
win10v2004-20231215-en
General
-
Target
a01eb6828a63c929ba8ddecb83d86666
-
Size
133KB
-
MD5
a01eb6828a63c929ba8ddecb83d86666
-
SHA1
68c5693bfefed3d154ab15694a1ab3f55c3b141c
-
SHA256
2c27c046216fd25dc6b768ce1b78f90010f678b72480b9899ad8b7368279fd1e
-
SHA512
4dc31e8144be24a325241e5cad341009a199cac555ec58eae72dbe4d522fd0ffa985837f1ea961e5d8108585c657f67b124d6ffd503392d842806033f0d0282e
-
SSDEEP
3072:UYjU8cQlv7rTqS9QDgI7A25TvNmqwJ4v56WmEpaa3qn1XLTgOVKCo3w4RGwQ:MfS7Fas215hc/Ea3Zog4RLQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a01eb6828a63c929ba8ddecb83d86666
Files
-
a01eb6828a63c929ba8ddecb83d86666.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE