Behavioral task
behavioral1
Sample
a400d3f3b35ad12a500e648115960aa8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a400d3f3b35ad12a500e648115960aa8.exe
Resource
win10v2004-20240221-en
General
-
Target
a400d3f3b35ad12a500e648115960aa8
-
Size
11.0MB
-
MD5
a400d3f3b35ad12a500e648115960aa8
-
SHA1
aeb314d9408b2f27bc477d096bde5c3ede7b523f
-
SHA256
e012d07cd292527ce3a72e49ec6b9a247a2b08a81171f76771288cc31795dc60
-
SHA512
466e309fdbcbb49eb8af86842112ef2e39eff3b08d17e28a367acb161da67e0ea882c5cbb7697f0f4fe2440fca2403744a5165ccdafa496d51d294d1c502571e
-
SSDEEP
98304:E3Epro1oRtM35mCckFR+vicS43EG/Y3hiRClFKU35mCckFR+vicS43:k96o33FR+6c8G/DAKU33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a400d3f3b35ad12a500e648115960aa8
Files
-
a400d3f3b35ad12a500e648115960aa8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE