Behavioral task
behavioral1
Sample
abe8a71a2cbfae00ecf957f352d04660.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abe8a71a2cbfae00ecf957f352d04660.exe
Resource
win10v2004-20240226-en
General
-
Target
abe8a71a2cbfae00ecf957f352d04660
-
Size
1.3MB
-
MD5
abe8a71a2cbfae00ecf957f352d04660
-
SHA1
94a2c1fd45a5fb136b4865e19ddb91aa8d473a2b
-
SHA256
98c03ccd176b14fa4c3abcb19321108e22c970cf8b436e287f91c2d58d923599
-
SHA512
ee804a2db950be27f178ff724eab12bd6f33855a3e375b437cabab2e0d29d7854e5154a94ea66ad560fa221e9e3e4f6b84b9f58089d8ce23ad5f6da1e6d49d01
-
SSDEEP
24576:Y3aA7cR+p44saaRJdERMs1CQSyPngYoXT2rRrUjWXvaxpwLPpxl+lAWvG:YvccRsfaFSqgY0Ir0gvupWRH+lA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abe8a71a2cbfae00ecf957f352d04660
Files
-
abe8a71a2cbfae00ecf957f352d04660.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE