Behavioral task
behavioral1
Sample
a165a7e6cbdbd767f0a8cb31131d5c51.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a165a7e6cbdbd767f0a8cb31131d5c51.exe
Resource
win10v2004-20240221-en
General
-
Target
a165a7e6cbdbd767f0a8cb31131d5c51
-
Size
5.5MB
-
MD5
a165a7e6cbdbd767f0a8cb31131d5c51
-
SHA1
87cac720dd6bdbf1ad3fd6bf421da6c17df80c02
-
SHA256
e841c7eb4496ab2bc6f9336c97ee285c371bd4a8907ec8b60ccff45b0b97788f
-
SHA512
ea9f817fa24457017af4e10242ee6ebfd3d43ae134f281da9197661d140a37252f358f541f0dc36e0776c04b0c38cfae423e7d2b78db4b1d20359bc3e7b11ec0
-
SSDEEP
49152:hZoAeQp4OWFrEQODZV9p7dK08bu5bNqs9Lloyay3vRmCFOGNj8mW4JH53R+wVG+I:h2AB6rYlVZ8Y335mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a165a7e6cbdbd767f0a8cb31131d5c51
Files
-
a165a7e6cbdbd767f0a8cb31131d5c51.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE