Behavioral task
behavioral1
Sample
a37d3a7907b5f712b8f7dcfff499a5a9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a37d3a7907b5f712b8f7dcfff499a5a9.exe
Resource
win10v2004-20240221-en
General
-
Target
a37d3a7907b5f712b8f7dcfff499a5a9
-
Size
302KB
-
MD5
a37d3a7907b5f712b8f7dcfff499a5a9
-
SHA1
624d7f5d8965fd6bada1dcd08674512753a77d31
-
SHA256
ea2e5acebe29d68dd7bbb5d95d7875506b06b53d5553e0e0867506345871ea75
-
SHA512
688ca7ecf7b555f54513e25f959aaee07fa106bc0503696257606b285eeb109ee2e960e2ef62ca93a3a65e99cac66868f467a225eabf02d15fc8a3784305b2de
-
SSDEEP
6144:05zp71k34/J2zxch6yZ3/6jOYJpRqkAu/cNmQ:05zp71wq2zKh6ysBqqcNm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a37d3a7907b5f712b8f7dcfff499a5a9
Files
-
a37d3a7907b5f712b8f7dcfff499a5a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE