Behavioral task
behavioral1
Sample
a2b070cfb9e8f62516a75ea5ff360184.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2b070cfb9e8f62516a75ea5ff360184.exe
Resource
win10v2004-20240221-en
General
-
Target
a2b070cfb9e8f62516a75ea5ff360184
-
Size
33KB
-
MD5
a2b070cfb9e8f62516a75ea5ff360184
-
SHA1
f63a3bc076c7b3f887c7a29c235b354414602bad
-
SHA256
528578a3e51e060c501abce93fd4f002192427bbcb8eadab90f31a71975490f2
-
SHA512
804e4d2c6f9e316bafe84e338b32456d02138a4a7ba0dc50258c130770a81db69687172f6b48e67b97ded54a0313d238cab5b2faff749c1d683280edcba12297
-
SSDEEP
768:oOCwxnyGOfhY4k+yyxNAvzil8J7u5vioWGCc7n8cZ6Z:vTRy/7Fx++l8Ja5vzWGh8tZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b070cfb9e8f62516a75ea5ff360184
Files
-
a2b070cfb9e8f62516a75ea5ff360184.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE