Behavioral task
behavioral1
Sample
a606f39149a83971779adbb9bd3a5c2b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a606f39149a83971779adbb9bd3a5c2b.exe
Resource
win10v2004-20231215-en
General
-
Target
a606f39149a83971779adbb9bd3a5c2b
-
Size
2.8MB
-
MD5
a606f39149a83971779adbb9bd3a5c2b
-
SHA1
ce1cb2c78da92a6f451060a7c5d0911efdd78536
-
SHA256
c263bd103bbb4c1270a3d4205718e82fa3a660dfb94b066ae0bae845b30ea37e
-
SHA512
37b5b88dafff7a3b74929c0119e2063554f0c07501fbb074e7a5da1c0e67e76b467758a348dcc47f1a1899c1eedbc9a2b1fd8f8f2b48e96643dab77f3241ea6b
-
SSDEEP
49152:4581uuIKkkFxMM8JgpSGUpCO/C22eR1SxOcGZNldgO43P/co5OuTw6aW8:wz7KnLTMG0COK2HZVNfZY0b6aW8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a606f39149a83971779adbb9bd3a5c2b
Files
-
a606f39149a83971779adbb9bd3a5c2b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE