Behavioral task
behavioral1
Sample
a2cd6617e5b1c4b0a6df375d878d33f1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a2cd6617e5b1c4b0a6df375d878d33f1.exe
Resource
win10v2004-20240221-en
General
-
Target
a2cd6617e5b1c4b0a6df375d878d33f1
-
Size
29KB
-
MD5
a2cd6617e5b1c4b0a6df375d878d33f1
-
SHA1
c915ad69f898d22ff0dd08bb3640ca2219ce5f7f
-
SHA256
1645539f4a9c1947f6c7ece4a6581d79478099c0ef262beea796ac2bd1df21d9
-
SHA512
c07627df9302a8ab4bdae4f9eb3a5a39677ea9354628f21d354901c25316d5452179b751dd3469ffb95ed9e71702dfd1293a1e5257d11429096779214116277b
-
SSDEEP
768:hMy2m+5KCDhjyHTN7QK24kbkzbXPAwDF8Aci:eJm+VglQs+kP4Ymi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2cd6617e5b1c4b0a6df375d878d33f1
Files
-
a2cd6617e5b1c4b0a6df375d878d33f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE