Behavioral task
behavioral1
Sample
a3f2865f1ade9cf284084bae81e453dd.exe
Resource
win7-20240221-en
General
-
Target
a3f2865f1ade9cf284084bae81e453dd
-
Size
784KB
-
MD5
a3f2865f1ade9cf284084bae81e453dd
-
SHA1
fb48aedeaec6d4068ef74616a1bb2bbf7ecb4b84
-
SHA256
eabc901b181cb8e7bf65ec3f77a09ea170cc68932cb4647981f021b0f5a8150c
-
SHA512
74ff3330701cf9cce70736bd33814971364ac75db11283df17bf76927c4a28ce822e98632b4eb2c518238a02f32dad4bfc577e40bc4d339fcfb080045d7785e8
-
SSDEEP
24576:iAhDGzr6meggYGioaXiandKAtifIqkceGSdB0/8Y+:ixzW7ggqJXiad3ifIikdWEY+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f2865f1ade9cf284084bae81e453dd
Files
-
a3f2865f1ade9cf284084bae81e453dd.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE