Behavioral task
behavioral1
Sample
a461470f3da1b188073df34f17d54e66.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a461470f3da1b188073df34f17d54e66.exe
Resource
win10v2004-20231215-en
General
-
Target
a461470f3da1b188073df34f17d54e66
-
Size
1003KB
-
MD5
a461470f3da1b188073df34f17d54e66
-
SHA1
00ce9a376a04d7fea67b41b03baf2593fee75214
-
SHA256
4ffc97659d390bebf391fdfbaf23dd46e49dd36073f3a849b4da75c9adba3e3e
-
SHA512
90949a7c6e4403319d7a30d15088e87249c744164564c8f478578abf351523f2d2eab4b4425a04771251cbb4da3da2fce6db6923177e664dbcc16f092b781b77
-
SSDEEP
24576:cd9V6iGe8F/z1VO/k9f+JDdr6tFpgkLQxp:cd9VOeg/z1VO89f+Jhr6tFpgkLQxp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a461470f3da1b188073df34f17d54e66
Files
-
a461470f3da1b188073df34f17d54e66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE