Behavioral task
behavioral1
Sample
a1eba6e22957298f3fb1072c74660977.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1eba6e22957298f3fb1072c74660977.exe
Resource
win10v2004-20240221-en
General
-
Target
a1eba6e22957298f3fb1072c74660977
-
Size
5.5MB
-
MD5
a1eba6e22957298f3fb1072c74660977
-
SHA1
73e94085b7624f55ba404f6dad27c76781614d17
-
SHA256
3053228d3678f183d9aaab8ce090e298ee57bf6264d2ebc6b8956e42f2a43d04
-
SHA512
b05c864f36a01683224d7eef0a38ba0d55074dad8015f1d6109ec5733c36bcb7032e8c8f2b0d41eaf99c1872ce2f96b65747aadecd5f4a8eaa6c2b078161519e
-
SSDEEP
49152:Ky/XEIxZGO5ja/rYSQGA5C9687kkGNI2TZ6g+BsDRqdb3Jay3vRmCFOGNj8mW4Ja:KHYmbAQQ8cZ6n35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1eba6e22957298f3fb1072c74660977
Files
-
a1eba6e22957298f3fb1072c74660977.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE