Behavioral task
behavioral1
Sample
a1265e662072e53b848e27ccf84bdcab.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a1265e662072e53b848e27ccf84bdcab.exe
Resource
win10v2004-20240221-en
General
-
Target
a1265e662072e53b848e27ccf84bdcab
-
Size
149KB
-
MD5
a1265e662072e53b848e27ccf84bdcab
-
SHA1
085691379ed10ccfd44c0565728bed307354939b
-
SHA256
e4aab3f1cadae53d2436b86ccfc61d6c1e9f2542027bf83ba4b1b6f7b56cdf73
-
SHA512
7458af5bdbfbcd1092cd509180f3ce1eaaec51c40cdeb7c54e89fb31835d96b0fd8a97fd3445389b9e723eb5f5cfc0bbfba90db4e87dedf2ba6f8841d51dda17
-
SSDEEP
3072:tlnBz/m4zvKW2NXUF71YG9QCXZgCc9N63M9bsvGP2Fp9Xj4F/:PnUmvr4kIGNb3M9bsvGPOp9XUF/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1265e662072e53b848e27ccf84bdcab
Files
-
a1265e662072e53b848e27ccf84bdcab.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE