Behavioral task
behavioral1
Sample
a3e5706af5771d6d08c34629de1545d4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3e5706af5771d6d08c34629de1545d4.exe
Resource
win10v2004-20240221-en
General
-
Target
a3e5706af5771d6d08c34629de1545d4
-
Size
2.9MB
-
MD5
a3e5706af5771d6d08c34629de1545d4
-
SHA1
fd5105546841e33fcf81d9e959a568b5d0f51f34
-
SHA256
3c093695f4b07e2c15080f879fed460df1488ae2e5c463d192e7e78ac1114fed
-
SHA512
887b47e1f7cbab463f8c46915cb67b6d0360c5537f6aa73ff3a190ab503ab3e68acb60cdef0088102106aa730b7b0b22b946c96c72697febdd7dfaaaf4bd2d83
-
SSDEEP
49152:B/QVUtSoEbKb/Aa8VjX91o+0/C8c32vSP4M338dB2IBlGuuDVUsdxxjeQZwxPYRr:B/QGtPMKb/8O4R3xgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3e5706af5771d6d08c34629de1545d4
Files
-
a3e5706af5771d6d08c34629de1545d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE