Behavioral task
behavioral1
Sample
a35da88fffb16d200fb38e08ef9c4fe6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a35da88fffb16d200fb38e08ef9c4fe6.exe
Resource
win10v2004-20240221-en
General
-
Target
a35da88fffb16d200fb38e08ef9c4fe6
-
Size
3.9MB
-
MD5
a35da88fffb16d200fb38e08ef9c4fe6
-
SHA1
6e384c562e055b20ef43ca65329f62097b79e14e
-
SHA256
e0b9e2a126368bf83ab4fd225181fec69f1461e1c5ba32e9d0ab5dbae33ebb2d
-
SHA512
60a1e05c687bf0243f10eaaf072cdee52f1996c305e3d6c7f427c112eb6adf28532da22dbddb4fcb1601b53ee526a2f580638e01d5a4c29f1ee3f2c225b48668
-
SSDEEP
98304:RgEb4I8lUScakcibiqhMbMgOn7n0bcakcibiqhW+VcH1gVHYlyqJRcakcibiqhM:wlTdlirybMgOnkdlirwKeyqbdlirybMv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a35da88fffb16d200fb38e08ef9c4fe6
Files
-
a35da88fffb16d200fb38e08ef9c4fe6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE