Behavioral task
behavioral1
Sample
a06df8dfe494b9522f7ff162cfc92d05.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a06df8dfe494b9522f7ff162cfc92d05.exe
Resource
win10v2004-20240221-en
General
-
Target
a06df8dfe494b9522f7ff162cfc92d05
-
Size
10.2MB
-
MD5
a06df8dfe494b9522f7ff162cfc92d05
-
SHA1
bd49bf85567c25c3ed0928a38dbcccc33eaff32f
-
SHA256
cdc91b1ffffa9480fdd1649f9f46111379cc49de40c475badbf6961d762f8fbc
-
SHA512
045fa8f9ae962e07291f54887986cc2425eeccea0a0158b2b17e4254dadbe2985c5266787639d57d817daa87b06acbb33fbf7441d5cc8ef118020e6d61def3f6
-
SSDEEP
98304:QG/JZeGtKd3j9nicJGxAoYM1XC63cY+jEwbeKzCPfB2jx3j9nicJGxAoYM1XC63:ZB5tKx5iKzH+aY+Kwjt5iKzH+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06df8dfe494b9522f7ff162cfc92d05
Files
-
a06df8dfe494b9522f7ff162cfc92d05.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE