Behavioral task
behavioral1
Sample
a.exe
Resource
win11-20231222-en
General
-
Target
a.exe
-
Size
53KB
-
MD5
dd0fbb72969908e8adbe62b580f7a73c
-
SHA1
d368a1ae651eaec07ff44c87cdd59a2d2f57e68e
-
SHA256
b378a82ba3c9e89d3360d83f398a8fadb74a7562c905d6265687bbd6c3d5b21d
-
SHA512
1225217101913102a7c33fd4a27ef8815d4f20cc89333f97adba206484ce9393cf9725a15dad79edda96a3da6630f1d9cf8ef19f9dc1bae5e151a3f53ead8ed5
-
SSDEEP
1536:J4dJooh0Wa0aer344Jw/ytUqVS5EkIijQ1fTNB3Ct:J4dzVTaer344JzthRZijQ1JB3i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a.exe
Files
-
a.exe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE