Behavioral task
behavioral1
Sample
a099fb56b98b4d8b6d43a5052d4b6b37.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a099fb56b98b4d8b6d43a5052d4b6b37.exe
Resource
win10v2004-20240221-en
General
-
Target
a099fb56b98b4d8b6d43a5052d4b6b37
-
Size
133KB
-
MD5
a099fb56b98b4d8b6d43a5052d4b6b37
-
SHA1
b0e7c3e41cc2642d66c7e599be706eabd57355a9
-
SHA256
04e3f9f8d3fc48a7c23d5ee6aead1fe975528296a1f3448120dacbd9e22c5552
-
SHA512
89995e5351545561bd364369deb6375fe42d664a3c590b08da1691b756c151a662d43d3e08885a5681de2e8fad57eb278ff9b46d0a2d384eee3581485361b6c1
-
SSDEEP
3072:QDBPjstu2NB3ehxmpeotXhMTQ3gF7lPdMPIUO1hiA/NM6WQ:mmtvrAxGxROTQO7lPdP14HQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a099fb56b98b4d8b6d43a5052d4b6b37
Files
-
a099fb56b98b4d8b6d43a5052d4b6b37.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE