Behavioral task
behavioral1
Sample
a2b76573d0452c576aba56e55a1865f3.exe
Resource
win7-20240221-en
General
-
Target
a2b76573d0452c576aba56e55a1865f3
-
Size
784KB
-
MD5
a2b76573d0452c576aba56e55a1865f3
-
SHA1
c13881bc07c6837f43dd5e459c81439495d2f106
-
SHA256
636f44af38d67867d920a68bd7c917e4d1cb3f8f108a1285d189ea5aa84335df
-
SHA512
d393cb3da6724a130de15e1721b0d7b380146e508da66cb3d8c50ceedc79184e881ff5ac11b093f65922aedc706e4d7cd46bb1aa1c30a56ef88f12b8bb44a415
-
SSDEEP
12288:M+mpfEYMoYmBZVJDe8S6V9vBnwnaMnUjp3AoAgP0lgoZsluPROPIzfKwyvz+EXBW:MQYw4U8S6fve5M+gP0eGs0PRhtT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b76573d0452c576aba56e55a1865f3
Files
-
a2b76573d0452c576aba56e55a1865f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE