Behavioral task
behavioral1
Sample
a3e61bac256bc5a83450dfcadc452598.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3e61bac256bc5a83450dfcadc452598.exe
Resource
win10v2004-20240221-en
General
-
Target
a3e61bac256bc5a83450dfcadc452598
-
Size
302KB
-
MD5
a3e61bac256bc5a83450dfcadc452598
-
SHA1
8ed34cd1c50f90b0de03ee327ebc5a0a33767516
-
SHA256
31d245a83198e1554b70e82ffb196b1bea1d3dc55a83aecefcb06688464be9df
-
SHA512
10cab5f6ca9ad22fbbbd3d52e71f40649f789d1ec4d8c5c0a7170e23875b81ca1060c9c4a86bca27fcb0a8531ef425bb6c71f581220fb65e72dd695cb2fcb700
-
SSDEEP
6144:5VmvwjwhZaDzcGzh9l9FzW6jLeiJL00CLbe/+RmQ:5Vmr5Gj75njLemgTS+m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3e61bac256bc5a83450dfcadc452598
Files
-
a3e61bac256bc5a83450dfcadc452598.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE