Behavioral task
behavioral1
Sample
abde3d8cbcc27fa0bb466ece9b2700fb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abde3d8cbcc27fa0bb466ece9b2700fb.exe
Resource
win10v2004-20240226-en
General
-
Target
abde3d8cbcc27fa0bb466ece9b2700fb
-
Size
5KB
-
MD5
abde3d8cbcc27fa0bb466ece9b2700fb
-
SHA1
74d4a4ef7390900e941a2f2c94b14c02bfe6de1f
-
SHA256
ddd98944091c43bc628951d287d2e4f43012fb9863011b5992f9ac64c0971b44
-
SHA512
647fe4bb88e666b81bb7b3a4f81386d58f6064085b72a1e7d22a96e9e890dc72cf3c51ee1d7b9ffdc19ae02b998c5589fa293e34089d563d976688071a2fcf66
-
SSDEEP
96:sJ+pHGCRGCDPzPfe7vGfZWxvSmBlFulFf+OT2W/SXYrrKkbX3sVbib/CoWolg4NT:sJeGoTdZWGFgW6KOkL36Wbp5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abde3d8cbcc27fa0bb466ece9b2700fb
Files
-
abde3d8cbcc27fa0bb466ece9b2700fb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE