Behavioral task
behavioral1
Sample
a09d589fb80bd8f4f9ad6a5556546487.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a09d589fb80bd8f4f9ad6a5556546487.exe
Resource
win10v2004-20240221-en
General
-
Target
a09d589fb80bd8f4f9ad6a5556546487
-
Size
1.3MB
-
MD5
a09d589fb80bd8f4f9ad6a5556546487
-
SHA1
e9c82b456af1961fd7f3ee8795ee8017c26097ae
-
SHA256
a5b4f0750d56ce211b8d61b1e9392494b1ff4ede1c38394c26f287ff69b1eb3e
-
SHA512
93a475c10e41ba38504b42aadcd1d038377ee7649ab1e50a21474fd7feb054847122c119351a0beddab96bf707814245de75b6638fee81a8f6cd62ad064f4c05
-
SSDEEP
24576:+k1waQSD9gqegHMcAuCSB/gF7fV3ZQIGxHGnCUDz3T3P62igNvG:+keFSJLeg/AuCE4tXQtmntL62i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a09d589fb80bd8f4f9ad6a5556546487
Files
-
a09d589fb80bd8f4f9ad6a5556546487.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE