Behavioral task
behavioral1
Sample
0a26aa636638ebbd7619b8a92215ce35.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a26aa636638ebbd7619b8a92215ce35.exe
Resource
win10v2004-20231222-en
General
-
Target
0a26aa636638ebbd7619b8a92215ce35
-
Size
3.0MB
-
MD5
0a26aa636638ebbd7619b8a92215ce35
-
SHA1
a18c1859b0c2f7e4287185352c9ddbd8e04621d1
-
SHA256
ba6576255564e5d0a88853bd69ae25d0ebfe68c79b5323fe07ca653acf93658d
-
SHA512
a52ae92bb01ac1d63b9a2b676447da72e692cbb037f7dc139713b6716496ea6d8fabb04b6941519116e580757276d8ae19e2b94a851f2fbe2f3cd26a8b81eb82
-
SSDEEP
49152:3RWN2peFcakLHQK50ZEIrBLcakLvUcb5jacakLHQK50ZEIrBLcakLj:hWUpCcakLv02IrBLcakwcb5jacakLv0+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a26aa636638ebbd7619b8a92215ce35
Files
-
0a26aa636638ebbd7619b8a92215ce35.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE