Behavioral task
behavioral1
Sample
0451a94165c90fa32df98e80adcc06aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0451a94165c90fa32df98e80adcc06aa.exe
Resource
win10v2004-20231215-en
General
-
Target
0451a94165c90fa32df98e80adcc06aa
-
Size
1.8MB
-
MD5
0451a94165c90fa32df98e80adcc06aa
-
SHA1
2650a495b2df56c8ae4b5845d05ec90c0879482a
-
SHA256
201da5b33d95b1370b0b7c4d77fce7cfdee133482c55c827702b41a9d6d316ac
-
SHA512
5eb0c19b6b8da7d57b6a7502c8effe98e6e3c31c0c28b88b4545448186e583e77b661b06fc24d587cabd1ac685556826b41b9ad7bac0899434d55ff820892bf1
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq3:SCqm2Jpr0nNM7Dus7Nxm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0451a94165c90fa32df98e80adcc06aa
Files
-
0451a94165c90fa32df98e80adcc06aa.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE