Behavioral task
behavioral1
Sample
a0a153b8dc4a22ce86d7768385b03803.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0a153b8dc4a22ce86d7768385b03803.exe
Resource
win10v2004-20240221-en
General
-
Target
a0a153b8dc4a22ce86d7768385b03803
-
Size
48KB
-
MD5
a0a153b8dc4a22ce86d7768385b03803
-
SHA1
7e3d0fa0ced32a7a8db5276eef3359fb0b25ec7b
-
SHA256
c15a7e9f618d6b58599aef581b990da0a34036e6251657595c065bb5403ba601
-
SHA512
75672887015a48990fb9c0568c00ea258b93c9faf6ee2ba9541fadbeecd33c471b749f1749f8624694f5024915b11dff945e042cbd7b1661d9a4f7a1838e608c
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFTvZfeoFiKPoEfJPLpSL:SKcR4mjD9r823F7gooKPPhPnXMNJj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a153b8dc4a22ce86d7768385b03803
Files
-
a0a153b8dc4a22ce86d7768385b03803.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE