scan
Behavioral task
behavioral1
Sample
a252d89d645492296cb1f4a9f49bbbd4.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a252d89d645492296cb1f4a9f49bbbd4.exe
Resource
win10v2004-20240221-en
General
-
Target
a252d89d645492296cb1f4a9f49bbbd4
-
Size
15KB
-
MD5
a252d89d645492296cb1f4a9f49bbbd4
-
SHA1
9a086e19938eed7b85a3b3073361557e8bd06d1c
-
SHA256
19ecb9c67d5c80e70255a68a66a523288e0f1bb9dac23483034b67ce6526cd88
-
SHA512
8c0595230b81c1d39e276bc01856e8ac9cd20fe8e3ad7ef5cf7852a1076a07404001d9f61c46f904d257e5f85124677e31bb54fe5882d187c1bd9d1979c3810c
-
SSDEEP
384:V4lGaSOzx3iB++wEUl9RuTgePf4Ec2j/znXU:V4ld3iB+79Rucwfxcozn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a252d89d645492296cb1f4a9f49bbbd4
Files
-
a252d89d645492296cb1f4a9f49bbbd4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE