Behavioral task
behavioral1
Sample
a372157eeb037d1a77f99ac376ff0aa7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a372157eeb037d1a77f99ac376ff0aa7.exe
Resource
win10v2004-20240221-en
General
-
Target
a372157eeb037d1a77f99ac376ff0aa7
-
Size
2.6MB
-
MD5
a372157eeb037d1a77f99ac376ff0aa7
-
SHA1
ccbb5e5b8e2caffa863218a5bd9ac5624f479633
-
SHA256
9eba830526ce384f93530b0a00743f1c2d2a0d9866035bfa2fc3864fd3b5b223
-
SHA512
f31c8d46cf337170856f84b87f2e5c84aee20bf57ad1af3509320f526a9f122da03b5d6f87a4bfff4658a520cfc5c764313eb5c14b54fc0fe8ba10e272ae1c37
-
SSDEEP
24576:+9shlKgvLsqi5eH6E/WE+lENY10+ew4X5AcjEXe9tghHFBtCzLN9HX/x8pd/xyKj:yAlKgjQ46E/igH+cjYlKNgD/0way3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a372157eeb037d1a77f99ac376ff0aa7
Files
-
a372157eeb037d1a77f99ac376ff0aa7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE