Behavioral task
behavioral1
Sample
a2b5a0d5b082ea4bca771d5f69d050e6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2b5a0d5b082ea4bca771d5f69d050e6.exe
Resource
win10v2004-20240221-en
General
-
Target
a2b5a0d5b082ea4bca771d5f69d050e6
-
Size
48KB
-
MD5
a2b5a0d5b082ea4bca771d5f69d050e6
-
SHA1
0404584bdd01d47c14d2167501ffc90ec2e34837
-
SHA256
f45d8e67c67186305c4f697b0c38515f7567ef5dc1fcef838e255d8ad83a95ca
-
SHA512
0e88b909aae6102790bbc0aded2a4cd72c8d2d1bf1b26fc4e258f1e9ffda125a2c805418cb6986093a8dc643fe5bd7e4a0cf59284e8932ec4e5981179ebd493d
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFBG1JUmQk1csXRkCUegu:SKcR4mjD9r823FBGj+uGTG5wK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b5a0d5b082ea4bca771d5f69d050e6
Files
-
a2b5a0d5b082ea4bca771d5f69d050e6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE