Behavioral task
behavioral1
Sample
a0a5efb067036b29c25e5d82f508fbb6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0a5efb067036b29c25e5d82f508fbb6.exe
Resource
win10v2004-20240221-en
General
-
Target
a0a5efb067036b29c25e5d82f508fbb6
-
Size
10.2MB
-
MD5
a0a5efb067036b29c25e5d82f508fbb6
-
SHA1
51d8011238484be8046f73a03abf7791ed34ad7f
-
SHA256
a0f52198e7aaa208dcdbb3ba427940da3a5f947180786719d81d38cbef9548a2
-
SHA512
e386b35b8391f8566b70efa8e8d9788322963e64a6f8c0e1b3e145884555d2b2a3b27015dec0fa556e7027dc18647c9d7bcdcb7dff948cf84e39de8cc7133c51
-
SSDEEP
98304:0ocDa7lM3S11qronI0Iy5fKP7grvYLS3HFY16UT8+/RJ3S11qronI0Iy5fKP7grX:0rD6pa0j99ETv0a0j9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a5efb067036b29c25e5d82f508fbb6
Files
-
a0a5efb067036b29c25e5d82f508fbb6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE