Behavioral task
behavioral1
Sample
a137f9ea75032e829e1b96ffc0788ced.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a137f9ea75032e829e1b96ffc0788ced.exe
Resource
win10v2004-20240221-en
General
-
Target
a137f9ea75032e829e1b96ffc0788ced
-
Size
24KB
-
MD5
a137f9ea75032e829e1b96ffc0788ced
-
SHA1
5f99315a5af9d0a49a537d6be9c5e8f84fd740f9
-
SHA256
98bae7abcf80deab5d856cbcaa406a9b3c103234ad5c57da9189381477390664
-
SHA512
6b4d3d765a05412820e850521eff83d804f202ca6e994fd9af7683dd2322031c38600e362252961a4b0582ddc3215b28b797dcde5956de5587eee07b0445714e
-
SSDEEP
384:JNzE4Md3YYRGtk6TGzWZPxtj/NUIJz9ZdpXh4gYgK+hheSLpqMND9nqAh/:HEHpGtk6T7Pxt/NTJBNh4s7veSlNPq0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a137f9ea75032e829e1b96ffc0788ced
Files
-
a137f9ea75032e829e1b96ffc0788ced.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE