Behavioral task
behavioral1
Sample
a1f5e755879cd591d250eda56c64d299.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1f5e755879cd591d250eda56c64d299.exe
Resource
win10v2004-20240221-en
General
-
Target
a1f5e755879cd591d250eda56c64d299
-
Size
473KB
-
MD5
a1f5e755879cd591d250eda56c64d299
-
SHA1
b934000c618dcafc0455ff1fb5a6ced0138c3d63
-
SHA256
31f12bb863085d8589be5859e64e9879226242063dc1d6ffee5025d4023ea5b6
-
SHA512
2b0bdbf1c4cb8b5088c9448a0ada95f95bd13f30c39f0d022d086dbc4626c04fb438fa11aafe498f911fa78f3008344fcd1d0ecfb01fe06cedbbf95df98f887d
-
SSDEEP
12288:WzL90nof+ogCJk4x4jNL2ooKfgvrK1fc0HMxwB2h5RLkaS9rHQ/0b7uV5E:5iHgC7x4ZL2oarK1fc0sxwB2hLEGKt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1f5e755879cd591d250eda56c64d299
Files
-
a1f5e755879cd591d250eda56c64d299.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE