Behavioral task
behavioral1
Sample
a4682594975b609cdd28dd64c84c8d27.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4682594975b609cdd28dd64c84c8d27.exe
Resource
win10v2004-20240221-en
General
-
Target
a4682594975b609cdd28dd64c84c8d27
-
Size
947KB
-
MD5
a4682594975b609cdd28dd64c84c8d27
-
SHA1
b288cc070c9fcecba9d276cc18de0f434b3c5e8f
-
SHA256
3c4f1940d41930176e5da0212f880d343f4e693f505c7614fc4c513487c55dca
-
SHA512
28bec4a2e03c5fd657df76faa5ca10a8c3b2f3d8b198056278bd0248a82db45e635637cb683cc961dfe0a68709a4c722680abc6afd99c14af8c7d9e2a206ed32
-
SSDEEP
24576:FiWJ/bC66e35q4QcK5nfPgyhKT0LE8XREpxT2puPHyIO:Q66ugteTQ9REpw6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4682594975b609cdd28dd64c84c8d27
Files
-
a4682594975b609cdd28dd64c84c8d27.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 472KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE