Behavioral task
behavioral1
Sample
a9ef3cbe3b19e0556b02a71a420bde7e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9ef3cbe3b19e0556b02a71a420bde7e.exe
Resource
win10v2004-20240226-en
General
-
Target
a9ef3cbe3b19e0556b02a71a420bde7e
-
Size
1.6MB
-
MD5
a9ef3cbe3b19e0556b02a71a420bde7e
-
SHA1
44610f1f3a37916b959558107efd4a3ebfd757ac
-
SHA256
7ec34b38e9729d58068dced753a67c063f3f35bbeefff423ffe19ac5451db6ff
-
SHA512
e62c042a8e8b87cc6014ef40cb427996276eb92285895d252a72b1290b22735ad85bf8742f17744b970a1a36e96c55de211fa2f3569a6acb9ab692af0b7dc12c
-
SSDEEP
49152:Ed2ySde9r3j7O6QcakLz0ae7YeyEIxSbN6vURLacakLz0O:s2ySde9rj7O6Qcakcae7pyEIxS56vUVl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9ef3cbe3b19e0556b02a71a420bde7e
Files
-
a9ef3cbe3b19e0556b02a71a420bde7e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE