Behavioral task
behavioral1
Sample
a097f2e6dab6819faca7af32bdfc4cdc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a097f2e6dab6819faca7af32bdfc4cdc.exe
Resource
win10v2004-20240221-en
General
-
Target
a097f2e6dab6819faca7af32bdfc4cdc
-
Size
334KB
-
MD5
a097f2e6dab6819faca7af32bdfc4cdc
-
SHA1
a4e6149c8a798d0b6bc99a9d67eb07a6794e71ea
-
SHA256
a1d6961fad9a14af8e208df339d3d78b5565a6b59ebcf5a1d1b5ee30a4333650
-
SHA512
c87c5825a4056cc5ecff1c8c9356cadad74a2414050f80d0490dde45d407dd91edcd2fce8db790f8f507d8fc513b3c501075db976d7db4568b6a8ab8d1a4fdfd
-
SSDEEP
6144:AZvMGw5ntIhvxEVOgAjIFjOYaCUPwnzjKSZD9G8CRbRxHEB:AdMDnWGhaFP0jKSZupRqB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a097f2e6dab6819faca7af32bdfc4cdc
Files
-
a097f2e6dab6819faca7af32bdfc4cdc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE