Behavioral task
behavioral1
Sample
a4572db24931f2539bfb7558fa5c970e.exe
Resource
win7-20240221-en
General
-
Target
a4572db24931f2539bfb7558fa5c970e
-
Size
784KB
-
MD5
a4572db24931f2539bfb7558fa5c970e
-
SHA1
2d5f5c3ceb990d9f51d89239c5570fb84b375f87
-
SHA256
d754997aaa32f4c8634d061e66efa166295e50b401898189f6f7392cb6ffab3b
-
SHA512
a88c1849ef73ae30299f14ad0931166c74f3c156aa0dba98567e4d7f049d790bee506eb591cf13586f5bd6a91dd9830dff136cd2ecc45d7dcbae0158aaa44038
-
SSDEEP
24576:907T0vOU2sNvxuJ78w4Q3co/ZesRBj1erqC:907T0vOA5u8xQ3co/rfwm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4572db24931f2539bfb7558fa5c970e
Files
-
a4572db24931f2539bfb7558fa5c970e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE