Behavioral task
behavioral1
Sample
a168e0961b5bd11a1ba1418f3d65c645.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a168e0961b5bd11a1ba1418f3d65c645.exe
Resource
win10v2004-20240221-en
General
-
Target
a168e0961b5bd11a1ba1418f3d65c645
-
Size
1.8MB
-
MD5
a168e0961b5bd11a1ba1418f3d65c645
-
SHA1
aab36ae022dffefbd8d1e30ac4f744ea3e333847
-
SHA256
e931b677f1d29b99ed6a6862c81117ce8fa7521a4f5b0985a43dd27295fea443
-
SHA512
ea54f493bc42c2d54ab97e0850630524bbe12dc5bc255046e8b9875a22dc33b62aa5f7be28d2f2c8e190f7803c648e6ba2911239e782fb9a636917eb9635ff01
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqM:SCqm2Jpr0nNM7Dus7NxB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a168e0961b5bd11a1ba1418f3d65c645
Files
-
a168e0961b5bd11a1ba1418f3d65c645.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE