Behavioral task
behavioral1
Sample
a4ef6235ad0bd337b5423cb7b8837e90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a4ef6235ad0bd337b5423cb7b8837e90.exe
Resource
win10v2004-20231215-en
General
-
Target
a4ef6235ad0bd337b5423cb7b8837e90
-
Size
1.6MB
-
MD5
a4ef6235ad0bd337b5423cb7b8837e90
-
SHA1
882ffa83fa5e9e68205a8eee419cf37bf3aef469
-
SHA256
5f1761bd1c5a1ad98b924dc82433cf5231059741ca9105146d37c50baf924f09
-
SHA512
3bb3f4210386bee93bc69ed7574b5f76d63b6364b0f84220bab9dffa4386a61b04711fb72b77255fe3c6acf805e63224bbf46f31cdfcd66b3d0296438233e077
-
SSDEEP
49152:J63dWlveiejFNcakLz0WiRNmk71Rf0kfAYlOtcakLz0O:J63dWoiejFNcakcWiR/hd0kfAttcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4ef6235ad0bd337b5423cb7b8837e90
Files
-
a4ef6235ad0bd337b5423cb7b8837e90.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE