Behavioral task
behavioral1
Sample
abf3260213494054f22b8bf6f1dc5e76.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abf3260213494054f22b8bf6f1dc5e76.exe
Resource
win10v2004-20240226-en
General
-
Target
abf3260213494054f22b8bf6f1dc5e76
-
Size
3.9MB
-
MD5
abf3260213494054f22b8bf6f1dc5e76
-
SHA1
50e89312d831c2dc64e9117059c37f4ddd2f132a
-
SHA256
5814791f78d876ff8b2db41001e8d2e4e01a1a7264d51d1f50772cbbcc1e6900
-
SHA512
733c9dd41d00e58bec42ea9b404a411818c2467e855fa433eb129d999d84a5ba4f85638b18f5d68ae612636162f2f4926a1ed9045c347263fab051f00997d25e
-
SSDEEP
98304:dusYXVtRjOOegg3gnl/IVUt4pJWzZtIygg3gnl/IVUV:dxYFsgl/iwgWttJgl/iG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf3260213494054f22b8bf6f1dc5e76
Files
-
abf3260213494054f22b8bf6f1dc5e76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE