Behavioral task
behavioral1
Sample
a35337055e86baedc235efc31e2469ca.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a35337055e86baedc235efc31e2469ca.exe
Resource
win10v2004-20240221-en
General
-
Target
a35337055e86baedc235efc31e2469ca
-
Size
302KB
-
MD5
a35337055e86baedc235efc31e2469ca
-
SHA1
5dabf8d69f167067cfd6410b14e2bb16d7eb5d2e
-
SHA256
c233ea3a68326e5a4fac8307451b17e5e1980459645bc8ac182cdeff02f14fba
-
SHA512
d56684c45478abca32fc0ee49e0b781d1e7e8890481fa05d0e4593bf2858adf4abda48b0f98e5a2640ca904f8987099f8fc747a9f48e94b1c46d8be03b303142
-
SSDEEP
3072:fA39O3NZad6Zx+m5rKpPSc4La2Ycf1RDpdJ83rvxoU4jY5R/Lrr1N+rQC6AR:fg9O3NZahi7DYcf1RDpHZY3zH1mQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a35337055e86baedc235efc31e2469ca
Files
-
a35337055e86baedc235efc31e2469ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE