Behavioral task
behavioral1
Sample
a3db1370fc5ddaf7b9cad4b19055c559.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3db1370fc5ddaf7b9cad4b19055c559.exe
Resource
win10v2004-20240221-en
General
-
Target
a3db1370fc5ddaf7b9cad4b19055c559
-
Size
3.9MB
-
MD5
a3db1370fc5ddaf7b9cad4b19055c559
-
SHA1
dbb56c7f87c6e42f0aa3e3a519e923015a4c525a
-
SHA256
b7a2a25215d6ad6239f268277c435c56c7c4e2b414d1e323bc0509216793cb44
-
SHA512
bb565c2aabcb8e07272bb3c99787904775ecc92115b951d79140bd96104d6197f0989a40317925e601a422cdea2a1be3c3c59650ff443eb59e56807931490c0d
-
SSDEEP
98304:P7G1i0AJO/cakcibiqhPAkcseZcakcibiqhwG3kye/bE41cakcibiqhPAkcseZcH:C1NAKdlirWJZdlir2G3k7/b71dlirWJc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3db1370fc5ddaf7b9cad4b19055c559
Files
-
a3db1370fc5ddaf7b9cad4b19055c559.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE