Behavioral task
behavioral1
Sample
a22ade62f02ebbac1cd190338330ca3a.exe
Resource
win7-20240221-en
General
-
Target
a22ade62f02ebbac1cd190338330ca3a
-
Size
784KB
-
MD5
a22ade62f02ebbac1cd190338330ca3a
-
SHA1
e05fbfafc769fd83ec5ac71136da837897e45ea0
-
SHA256
30895a54ad39940cff83b6e9f5dc13ec332c97a9219d5db2bd3ef422436ebe5c
-
SHA512
ff73d0c01d227ca3c6937548e3e691081d4e5a4e3e3e73103c7928ce0a06434c86bff589a6a2e24a2503afde9480d96546f8f7b8de443fe778bf8c54b3e0d87f
-
SSDEEP
12288:8dInMN3Ixf6v9NrBbClqKqtQu/cdn/ngxCnzYdB+Ghsr761OeVQm73nZxUMXGSga:ln1fe9DthUd/BYdB+Ghh3F3nPLGS3H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a22ade62f02ebbac1cd190338330ca3a
Files
-
a22ade62f02ebbac1cd190338330ca3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE