Behavioral task
behavioral1
Sample
a1a55076790a483e2663f295337085cc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1a55076790a483e2663f295337085cc.exe
Resource
win10v2004-20240221-en
General
-
Target
a1a55076790a483e2663f295337085cc
-
Size
65KB
-
MD5
a1a55076790a483e2663f295337085cc
-
SHA1
d280727d58c786af0a004b4d70f549c07a28dfd3
-
SHA256
4f6afb8b6f481eaa81fd0db72f547d66d3bd9cc2ba023fe213d25fe943848a3c
-
SHA512
5bdb1475e4f65396f573f93d5c735bbdd58b4b665a3248f8d8a9bddfed1d42d6516865cc9245da4882c76b4172952b803ff7a081d735d2cd5d8d55502597a371
-
SSDEEP
768:aQNHoMR5kmNM1kapvWdvhfODFojCPqUJ95DLWLVZNhNYYLtGEQdTr:nGMR5bMJpvaODKjRUJ95DLeLmYpGEQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1a55076790a483e2663f295337085cc
Files
-
a1a55076790a483e2663f295337085cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE