Behavioral task
behavioral1
Sample
abaf6d71a225ac89c86a696705fe30af.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abaf6d71a225ac89c86a696705fe30af.exe
Resource
win10v2004-20240226-en
General
-
Target
abaf6d71a225ac89c86a696705fe30af
-
Size
2.9MB
-
MD5
abaf6d71a225ac89c86a696705fe30af
-
SHA1
563d59a2397ef612b05b74355dac421de3f2967a
-
SHA256
09125af8844064afad123abcf404a5bb9c459ccc48ec849b29c46655a90c2c40
-
SHA512
fb88eb658158237b2335aa28c16954d9df2d3d2a1938300a5c110b26712197628912178c717ffa679aab3a04c05ce15092df0ee97263b1b292d096af5652b6ed
-
SSDEEP
49152:ClxHL/7a95/ifr561jK6cNf6bJApzrWl605qWFN74NH5HUyNRcUsCVOzetdZJ:4xCLiT52+lNybqHWo0hF4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abaf6d71a225ac89c86a696705fe30af
Files
-
abaf6d71a225ac89c86a696705fe30af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE