Behavioral task
behavioral1
Sample
a4bac2e362f95cf68856aaa1a3abb488.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a4bac2e362f95cf68856aaa1a3abb488.exe
Resource
win10v2004-20231222-en
General
-
Target
a4bac2e362f95cf68856aaa1a3abb488.exe
-
Size
113KB
-
MD5
a4bac2e362f95cf68856aaa1a3abb488
-
SHA1
c4c768cab5225887aa0f6a39f059cfc66f7dc505
-
SHA256
80df5b46588be40b928b6f0ec9aec01cea118ff31e78d119600451324d759eb9
-
SHA512
183e1f58725cee0d608be7b713b9a27dfefff4da0810f0c89f558ae40a1a141083010777c29291bdce45aee6cd1c437c2b7c971db37af23850aaa1863813ee15
-
SSDEEP
3072:aDOkexJLFdrPZ1Tj4mYWR/R4nkPR/1aVuyJMO7Oih7vC:aDOxZXPIo5R4nM/40yJMO7vh7a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4bac2e362f95cf68856aaa1a3abb488.exe
Files
-
a4bac2e362f95cf68856aaa1a3abb488.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE