Behavioral task
behavioral1
Sample
ad4551f021400ba54fd2393f7d204aba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad4551f021400ba54fd2393f7d204aba.exe
Resource
win10v2004-20240226-en
General
-
Target
ad4551f021400ba54fd2393f7d204aba
-
Size
7.8MB
-
MD5
ad4551f021400ba54fd2393f7d204aba
-
SHA1
245fe4302933685047d63dbb70d91c315b92cd3e
-
SHA256
940c2c3d3b706a70e7c9ade65cf9dd8acfa00c7d1072d82e6a9e626344c16383
-
SHA512
68279d5d64169213578374ffc1516817cb7e0253f1a6d6d6d2e054b5c6ff4ca8ef9f84d32cc1eaf6c38f54415b320aeb1915baa92115d34ce03f9a2b1fafda25
-
SSDEEP
196608:fvReh7FkNqKpDPr0qh7FkNqKV8hcxOIOU6h7FkNqKpDPr0qh7FkNqKByVUh7FkNB:xY7upJQ87upyhc4Us7upJQ87upEVO7u/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad4551f021400ba54fd2393f7d204aba
Files
-
ad4551f021400ba54fd2393f7d204aba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE