Behavioral task
behavioral1
Sample
a2397c91658eaa9423258ad6088b325e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2397c91658eaa9423258ad6088b325e.exe
Resource
win10v2004-20240221-en
General
-
Target
a2397c91658eaa9423258ad6088b325e
-
Size
1.5MB
-
MD5
a2397c91658eaa9423258ad6088b325e
-
SHA1
d9a6f54e0764030ff30fcca9d161313a140d7588
-
SHA256
8b4f397d069d88d56c07243f71f6eaa0aeb9add05a06c422e8e7e0000f78bf43
-
SHA512
6c12420aa6dad69baf49d7b4bb69fe6132fda5f94adfdaff197a854489b4832a7138dda4f30347ce6fca8a9c821d43933c13fa2c059fb4c85cb6236d29789241
-
SSDEEP
24576:VQgwg8Z8catyCbjYkoOnibpaYTPuVcslQZSkmXay6IdEWVPcUqnr9j8CW:ViNOcU1oOni0rc2/km16IdEWVPcV9IC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2397c91658eaa9423258ad6088b325e
Files
-
a2397c91658eaa9423258ad6088b325e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE