Behavioral task
behavioral1
Sample
a1af32555e397028ac76cfad60faecc4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1af32555e397028ac76cfad60faecc4.exe
Resource
win10v2004-20240221-en
General
-
Target
a1af32555e397028ac76cfad60faecc4
-
Size
1.2MB
-
MD5
a1af32555e397028ac76cfad60faecc4
-
SHA1
fba74190163aa949a91dc5c0c3e07d480537f7c4
-
SHA256
30215fa302ab7b58a7a73cfb0147429576b1cfd3defb7dea67ae94b6a864d4f0
-
SHA512
e0035d594e146af7ed551eed3085e336bd6b42a88b9fab34fc0e69c9aba06ecb0d7023b3580c4c677cafb78a830f0ec397c2aa2b12b0e46b0b578321449c942b
-
SSDEEP
24576:iMiqQCjdQ5+uav4NVa3o1gs7tQCjdQ5+uav4NVa:j/QeC5+dsVafUQeC5+dsVa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1af32555e397028ac76cfad60faecc4
Files
-
a1af32555e397028ac76cfad60faecc4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE