Behavioral task
behavioral1
Sample
a2b3074a68d8109185f607f67a3acbee.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2b3074a68d8109185f607f67a3acbee.exe
Resource
win10v2004-20240221-en
General
-
Target
a2b3074a68d8109185f607f67a3acbee
-
Size
10.2MB
-
MD5
a2b3074a68d8109185f607f67a3acbee
-
SHA1
6f0fc92e680a3368f41cb2c38e6d8de4fdcddb84
-
SHA256
a3cfd006ca87b7d4a16f727d8dfeb8a25782517fd15c091949a440695df889ab
-
SHA512
45896e70692afffc39c52caa55ff91f6ce60ec085cc12dd1915ba1e919ada059a8089b8e85f6e1df66dd629be067966b3583af3150a68fbee0301d441af327b3
-
SSDEEP
98304:DeFNDiqHgiYRh3PXMzZhKDV3avQfrYVka9YFJPc3PXMzZhKDV3:MRiWghc1hNZkwY+c1h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b3074a68d8109185f607f67a3acbee
Files
-
a2b3074a68d8109185f607f67a3acbee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE