Behavioral task
behavioral1
Sample
abd8496e769afbbcd061f50a3e302ee9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abd8496e769afbbcd061f50a3e302ee9.exe
Resource
win10v2004-20240226-en
General
-
Target
abd8496e769afbbcd061f50a3e302ee9
-
Size
2.0MB
-
MD5
abd8496e769afbbcd061f50a3e302ee9
-
SHA1
cce92c6c166b9907002767be94008702d22114f0
-
SHA256
1420643f41e09c2d3cdfc5b23fa3f56dfaec3b37e9acabd76790ec1346789807
-
SHA512
16089f8683e1152f469eea3b6e644627ef46be18a84955b7e0cbc091b1d7c5a39566c6138da0e294ecb1cec59344c4ca93d2d96ca4a6417dbd1c44bb6266e00e
-
SSDEEP
49152:0sEAfnuuMncakLz0ibq6yqhlUkFUUSWlNJcakLz0ibq6yqh:0sEAfnuuMncakcibiqhl1FUUSWlNJcaI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abd8496e769afbbcd061f50a3e302ee9
Files
-
abd8496e769afbbcd061f50a3e302ee9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE