Behavioral task
behavioral1
Sample
ab4e8cb0cabd782de480f09ab2efc691.exe
Resource
win7-20240221-en
General
-
Target
ab4e8cb0cabd782de480f09ab2efc691
-
Size
1.5MB
-
MD5
ab4e8cb0cabd782de480f09ab2efc691
-
SHA1
9a047189752050bbf6e150f010d8cfc23f7b3822
-
SHA256
a8b8e76e386de408c80dd549b2f4d455d9be9665a3971618eb53a22cc64a0489
-
SHA512
095055b4375989d8c98f7573b3141dbbced6751b52b528fea4929625a56d07b6a323cf79897ceec23c5567ed22150e5e0b01578a026c0fbb49767370be81ee7d
-
SSDEEP
49152:dQ1Hex3IAy7g5DxIAP9CcPPZ05Za9ZgWVoxm:G1HeyAy3A5PZ0ivgWVkm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab4e8cb0cabd782de480f09ab2efc691
Files
-
ab4e8cb0cabd782de480f09ab2efc691.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE