Behavioral task
behavioral1
Sample
a28eead965315188ac03470b92b42367.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a28eead965315188ac03470b92b42367.exe
Resource
win10v2004-20240221-en
General
-
Target
a28eead965315188ac03470b92b42367
-
Size
5.1MB
-
MD5
a28eead965315188ac03470b92b42367
-
SHA1
189e2d37e0e13edb60fb636b9d949f9363c331cd
-
SHA256
48e6a4b212ccee639a9f1913e312b1efff5f6db0d08b1af1ec0305921fa65843
-
SHA512
a523917eb13233dfaf473b9d1d420bf7071914644626e85ad575b56aa12840b26b6bad1aed5b6acf1f41f2aad517cda8cfd334acb067da0a0f413ffc426c04c0
-
SSDEEP
49152:CnteYCBKykHChxsjbf7dsyoYLdLUyBiSnuo8eay3UByeaq3IAgKOuzdV+sRHS0Ak:C0YAUnVUIJ53O48IUTH3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a28eead965315188ac03470b92b42367
Files
-
a28eead965315188ac03470b92b42367.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE