Behavioral task
behavioral1
Sample
A-Trainer.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
A-Trainer.exe
Resource
win10v2004-20240221-en
General
-
Target
A-Trainer.exe
-
Size
126KB
-
MD5
e5b2be5ad7d9bdd310a3bf1c9881ad9b
-
SHA1
b3404f5979ea6e8c17617aa8ea3ce9e7cd8a5db3
-
SHA256
a19ff74af3d15f4406d17ea4af8b43a670701785cdfacb59297e9776dd328d56
-
SHA512
0d240331d42876ab92d4dc1867f389c6a898ca8f7491502df1b8cc8ce2dabd98cb8a058f04f332dc512625cd7ac32d2f7c6d2088ccad450bbe4c442638666908
-
SSDEEP
3072:2YrUlST3TTsGTCtlBYt9f0uP5f4tIn5g8nfout4Sr:2YrUlST3Lml2tp0ntIn+CfoS4S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource A-Trainer.exe
Files
-
A-Trainer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE