Behavioral task
behavioral1
Sample
a20a6140a9f96755e6be8806355661d3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a20a6140a9f96755e6be8806355661d3.exe
Resource
win10v2004-20240221-en
General
-
Target
a20a6140a9f96755e6be8806355661d3
-
Size
17KB
-
MD5
a20a6140a9f96755e6be8806355661d3
-
SHA1
623f8179d0e5f23264840df2a5b7ac2e535a4c96
-
SHA256
ea3c33213376e9673d5ce8aa9ceea215bd56aa0164f52abaafd56ab3932396fc
-
SHA512
f1fb505998efcc416cd4a645c34260fd38af3e747ebbe75c86a12501fa25e833904f614f66c6955e045b95c4aa7664ec4d19c4c2737a6fd6149ddeb9da506465
-
SSDEEP
96:eONIL7orjzSmboGV7kU64NQIcaiZDK3sUw:iL6XkcpcaipssR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20a6140a9f96755e6be8806355661d3
Files
-
a20a6140a9f96755e6be8806355661d3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE