Behavioral task
behavioral1
Sample
ab4f7f7336aec2cf83d1c5d3bd6f7e88.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ab4f7f7336aec2cf83d1c5d3bd6f7e88.exe
Resource
win10v2004-20240226-en
General
-
Target
ab4f7f7336aec2cf83d1c5d3bd6f7e88
-
Size
133KB
-
MD5
ab4f7f7336aec2cf83d1c5d3bd6f7e88
-
SHA1
c3c4984c981063f1b86740d42541301203d46b92
-
SHA256
cbfd8f2b11b4ba61a011206e5805d5d95032907742955cd6261cf614bc0a13f9
-
SHA512
76de69b2fa8e3dc622ca46daf82f4063dde8954bf4c0f9cfefb295e38fff31670afdcbe13b5baf1f94bd2ba86d8bb2e8eaed329e2dfb51fc78d0dcb623e84ce3
-
SSDEEP
3072:3Wmye465cBDMZSRLkzsb0TK2FEwP/4cpPpzjoLGHoYCDQ:3Jye46S1+0MsaEq4Oo2eQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab4f7f7336aec2cf83d1c5d3bd6f7e88
Files
-
ab4f7f7336aec2cf83d1c5d3bd6f7e88.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE