Behavioral task
behavioral1
Sample
a10ec1ed014075fd36cfc6257550231e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a10ec1ed014075fd36cfc6257550231e.exe
Resource
win10v2004-20240221-en
General
-
Target
a10ec1ed014075fd36cfc6257550231e
-
Size
106KB
-
MD5
a10ec1ed014075fd36cfc6257550231e
-
SHA1
346419a900b546d3b7c18d8b5a91914f84ed4097
-
SHA256
e3656252c2d4377a153101c2c7840d7f46b486ee0df1534d61f6e8a8fa54a4ad
-
SHA512
43b4174583f0e745c7ae6f8e46d27ac10e73377761568ecdb7a62b566d8c5059fc0db5d5d260a2a20e0d7b34024bc05b0a2fff63c2c3ca9195bbbe8847ddcdb8
-
SSDEEP
3072:jbDhvC6cQjiTcKUIwhQN362oBIa+Ir7K0VHmlvg:jRvCvTsIWuK2oeYf9VHuvg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a10ec1ed014075fd36cfc6257550231e
Files
-
a10ec1ed014075fd36cfc6257550231e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 909KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE