Behavioral task
behavioral1
Sample
a1390c90cb0bff56a09cb9ab988630d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a1390c90cb0bff56a09cb9ab988630d9.exe
Resource
win10v2004-20231215-en
General
-
Target
a1390c90cb0bff56a09cb9ab988630d9
-
Size
5.3MB
-
MD5
a1390c90cb0bff56a09cb9ab988630d9
-
SHA1
4c9b3ee8668f04e48e2e57691f99dea78f80702a
-
SHA256
f7a749334e65f26362473fdbf9bf4522155ca5db166695894d88608e25a956f3
-
SHA512
ff5f216dd63b8c4209d94d4cfdc51abc71154f95ec2b4f5b881d3057343c32f42b1d238bc89bb0a29ebc873ead91ed30718bda1bdc95f322de50dba23a648423
-
SSDEEP
98304:43R5HmPKimlHeBhvWNJzekqXX+EWHjDl0KB9f490ubjjnzHeBhvWNJzekqXX+EWD:02clORWqYCKBV4tvjnzORWqYD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1390c90cb0bff56a09cb9ab988630d9
Files
-
a1390c90cb0bff56a09cb9ab988630d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE