Behavioral task
behavioral1
Sample
abfaec41a5d0e28282bfa9b80615d43f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abfaec41a5d0e28282bfa9b80615d43f.exe
Resource
win10v2004-20240226-en
General
-
Target
abfaec41a5d0e28282bfa9b80615d43f
-
Size
46KB
-
MD5
abfaec41a5d0e28282bfa9b80615d43f
-
SHA1
5c128386d3b4438aadd87ef14ef954779e5216af
-
SHA256
e2dcff864c2c18c9927005539f01c0cc645072acd7f0a90b3319a0857c43204c
-
SHA512
810239ec00283c4c1cff0fd42ddb0691fd810a91ee5bd65c62eed38008e9928f9f9cda23c8794d9c52146a5bb5732144e239f29215557be26cec9ff5212ff30e
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFiSpapc2jx7QvzbmJCt5:SKcR4mjD9r823FiSpijx7OzTNp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abfaec41a5d0e28282bfa9b80615d43f
Files
-
abfaec41a5d0e28282bfa9b80615d43f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE