Behavioral task
behavioral1
Sample
a2149c2e39ea09f5b428cc3fb0e69c60.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2149c2e39ea09f5b428cc3fb0e69c60.exe
Resource
win10v2004-20240221-en
General
-
Target
a2149c2e39ea09f5b428cc3fb0e69c60
-
Size
283KB
-
MD5
a2149c2e39ea09f5b428cc3fb0e69c60
-
SHA1
e3647dd0468882cf7e1dc1e63ad62eff3a63a8ad
-
SHA256
53e08f02e03c8751032468e90c2dea6ab6e16f0167a864830a19e24e7aa99d0d
-
SHA512
2072bc279cf465288458b74fa3b74f1ed8deb36ca7b094f872f1b5cce06a0b80d264a2bf3ab96165f60d96b7218a0182bf004409580e9ac8a838d0e0e0226e3f
-
SSDEEP
6144:RtpwavOeriKgn1EjAGbQfbfyftRNhrdDc9me/V0Q3R:RVvOerLg1GcfbqPNhrdDwhSKR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2149c2e39ea09f5b428cc3fb0e69c60
Files
-
a2149c2e39ea09f5b428cc3fb0e69c60.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.������ Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE