Behavioral task
behavioral1
Sample
a1d8c3f3a96563aadb1a19742cc98364.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1d8c3f3a96563aadb1a19742cc98364.exe
Resource
win10v2004-20240221-en
General
-
Target
a1d8c3f3a96563aadb1a19742cc98364
-
Size
505KB
-
MD5
a1d8c3f3a96563aadb1a19742cc98364
-
SHA1
c37db68557d862851704209939943ef31409f514
-
SHA256
125e12ac310c3163a87a5f4e59fe68d05b117386f7a463141aab3ee1c9c91a79
-
SHA512
a59d0c0936326e9200d95379196f1f74cc2092e9c2a759b84ae9b0a15ca7aab1f57da69ed7abaef641660a08bcf81baea7d392eb06df7be1329c8fbee4fecc3e
-
SSDEEP
6144:RdNN9xRMsCzPu3RWFpoY8/uaVMvTxFAaWYdxfsLPrPwo:6hKRwpNLaVMvLJWYTfm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1d8c3f3a96563aadb1a19742cc98364
Files
-
a1d8c3f3a96563aadb1a19742cc98364.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE