Behavioral task
behavioral1
Sample
ad67c0a2ac5f1c567b81e19700bd7c3b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad67c0a2ac5f1c567b81e19700bd7c3b.exe
Resource
win10v2004-20240226-en
General
-
Target
ad67c0a2ac5f1c567b81e19700bd7c3b
-
Size
1.8MB
-
MD5
ad67c0a2ac5f1c567b81e19700bd7c3b
-
SHA1
acfa863fd9c9f87a7d123d413d3ce65b48d58a11
-
SHA256
d1843988cb2aa68e78db081ec3a36775982ae1098d18c41c03088713e60aeb39
-
SHA512
7804f2912cdc06cf58805f90e2f9d3a8ecf246a98b278e1efbec25cd45b7fb8b41a944d4731152ec1205c9b4c56841313276eacb5fa4cc2d3ec5e1ef8431bf39
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq9:SCqm2Jpr0nNM7Dus7NxE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad67c0a2ac5f1c567b81e19700bd7c3b
Files
-
ad67c0a2ac5f1c567b81e19700bd7c3b.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE