Behavioral task
behavioral1
Sample
ab8b000a2790db453d8ab70db4294fe9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab8b000a2790db453d8ab70db4294fe9.exe
Resource
win10v2004-20240226-en
General
-
Target
ab8b000a2790db453d8ab70db4294fe9
-
Size
1.8MB
-
MD5
ab8b000a2790db453d8ab70db4294fe9
-
SHA1
782ad7bb56899bc701f12d03660666f2426ceb22
-
SHA256
a63c01992c43736ca068061d9ddfb8160f95b66b44ad6ecb344f8efd9e4c82ab
-
SHA512
7983dd10668a65a21e52ed8e5c06180371ab36c3a8a8168eb4a3d5b1835e3ab3aa6e10c1a3b3a48ddcdb718ccaef1c693effa8e36853213dc7123113dbdfd602
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqYu:SCqm2Jpr0nNM7Dus7Nxpu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab8b000a2790db453d8ab70db4294fe9
Files
-
ab8b000a2790db453d8ab70db4294fe9.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE