Behavioral task
behavioral1
Sample
a42522e3f4793a98f21ac1759c2a3ee5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a42522e3f4793a98f21ac1759c2a3ee5.exe
Resource
win10v2004-20240221-en
General
-
Target
a42522e3f4793a98f21ac1759c2a3ee5
-
Size
125KB
-
MD5
a42522e3f4793a98f21ac1759c2a3ee5
-
SHA1
6e5b1ef78ba2992a97a439ea0fced6190e05fc08
-
SHA256
2fec5943b75d0e6949cae433ea85cd077b1e9140e4fddce9e98f5a100c8b7f13
-
SHA512
348eb5a615a63accabd017061baab47eb505482f669176562723d624a41f95d4d01fb3885c75ed62386c30d23610eddde73c2b73f6512510ccd25a66d2c37402
-
SSDEEP
1536:nJFH27/Byi7P8ZksjNZacWxfaSvA4PzncLhOBW2HblukFOxjuAhMZUL:ng/DLsPTWkMLCwWWn2ujO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a42522e3f4793a98f21ac1759c2a3ee5
Files
-
a42522e3f4793a98f21ac1759c2a3ee5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE