Behavioral task
behavioral1
Sample
a3ee9ab4f1376cb849e825ff3764309a.exe
Resource
win7-20240215-en
General
-
Target
a3ee9ab4f1376cb849e825ff3764309a
-
Size
1.5MB
-
MD5
a3ee9ab4f1376cb849e825ff3764309a
-
SHA1
fce7de54b5c1f0506e7b21a5e1b91c2ff29fa7d9
-
SHA256
f9f8040dccbdf6d91d3ea5e690b24ff4114b9e413420f36d7395da801ca8fe67
-
SHA512
bfa60b6123de35ff593fd6a9d0bfa7f14ae343354e20aadf6d5d5a6e4d2b348d27058a1dd963d18ddcbc32421cb1efe45d3639757d3c41d47966e3af6592b28b
-
SSDEEP
49152:aJ7xFhjTRF59M/USnG7tuS6mBYcAx3CaxxOXvU:eJLfQUSnGJuS6m/E8fU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3ee9ab4f1376cb849e825ff3764309a
Files
-
a3ee9ab4f1376cb849e825ff3764309a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE