Behavioral task
behavioral1
Sample
acb281dc91e9e92bdad21eaab389547a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
acb281dc91e9e92bdad21eaab389547a.exe
Resource
win10v2004-20240226-en
General
-
Target
acb281dc91e9e92bdad21eaab389547a
-
Size
51KB
-
MD5
acb281dc91e9e92bdad21eaab389547a
-
SHA1
1b78c6bfffed33fa08b71a70d624ea6e0036f85e
-
SHA256
2dc2bd03f0d319b4a29f2036fa2aebf4fdd3e3463dbe516400631d205f5f1fc9
-
SHA512
d9511cc279528b0a40db111fa65b3493569829650f5b4e14726ba6ef76e3728a10638473e6d8e79bf3babd1205442d6b3b239fe0b45d9446f0a9642ed1724dd0
-
SSDEEP
1536:5KCeZ4NSSjCNfXTxABwOr87y4KYhKGA7E7gAlw:/S/ryBh87KYhKGA7E7g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acb281dc91e9e92bdad21eaab389547a
Files
-
acb281dc91e9e92bdad21eaab389547a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA