Behavioral task
behavioral1
Sample
a20e2d1384e70370812c24c591135367.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a20e2d1384e70370812c24c591135367.exe
Resource
win10v2004-20240221-en
General
-
Target
a20e2d1384e70370812c24c591135367
-
Size
369KB
-
MD5
a20e2d1384e70370812c24c591135367
-
SHA1
35968392bc577d4e554182b9ecfca2c81ec2e63b
-
SHA256
9982d5c453cf8190c13f783de41adabe2f5217425afc606a7f33e24f4c2e6cfc
-
SHA512
0d8dd32b0448ddcdc2421935ba90fdaffe88e2a7dee2a7f575844e54264017d3748e6ef8d9763df9d9828d0f2b40155fe0a4969d926e03835fbb727679120186
-
SSDEEP
6144:/L642m5utGaZ6k5lsnk+87HToCFMn/U//XBQwAvlAeuvnBki9awiuSFBSnkCBvD:/J2m9aZ6kPskT7PFMns//uplAVvBD9aE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20e2d1384e70370812c24c591135367
Files
-
a20e2d1384e70370812c24c591135367.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE