Behavioral task
behavioral1
Sample
a3fad3a56fd0929dfc642da6c462afb7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3fad3a56fd0929dfc642da6c462afb7.exe
Resource
win10v2004-20240221-en
General
-
Target
a3fad3a56fd0929dfc642da6c462afb7
-
Size
5KB
-
MD5
a3fad3a56fd0929dfc642da6c462afb7
-
SHA1
dbff96b90fa2a2331c3957570806b8bf8dc8b218
-
SHA256
e45f4d1bb177c01a36d9154cea546e523b7962f0b165bf5fb93e17f53c1cc9b9
-
SHA512
4f3b8c74dd1fac37f07a81fe8a59eedc1bb31f47ec0b1da04ceccdb66708198cbc6e726e062694be43fcd2e376df726de3ca53a67b52275950eeb500dbadd357
-
SSDEEP
96:sJ+pHvAt3PvDSyivAo0fvek2V34RueYPYKAzvuoFgmvM3rRkk36:sJeGf7SrAo0Vc3KuewzWuoFDIkk36
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3fad3a56fd0929dfc642da6c462afb7
Files
-
a3fad3a56fd0929dfc642da6c462afb7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE