Behavioral task
behavioral1
Sample
a101bc57e4e2138b41964957f9ba0b60.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a101bc57e4e2138b41964957f9ba0b60.exe
Resource
win10v2004-20240221-en
General
-
Target
a101bc57e4e2138b41964957f9ba0b60
-
Size
133KB
-
MD5
a101bc57e4e2138b41964957f9ba0b60
-
SHA1
0c1f6ea0bdde023bbd78b3e145c2738d388a9fa4
-
SHA256
f85f031aeb7cf3f8246e1c2a8e43fe2d6f29fc6c7ef1b10052e668212fd23dc6
-
SHA512
56522c5dd58fa4a5b3c979e8a3859d9aea9e364f40d928c21f11aa82782ef2032282d0b62a974cb3684a5943bdc30a993e9ba313a5b537ab88599c7bd5b55335
-
SSDEEP
3072:xDhV0+1kKVs/h88vRp7cQmRtCq7mxwJCfiL53KQeZIKOgdQ:xX5y/y85podRtCqC+JEiL53vgdQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a101bc57e4e2138b41964957f9ba0b60
Files
-
a101bc57e4e2138b41964957f9ba0b60.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE