Behavioral task
behavioral1
Sample
ad8a379ff20fd19bba8324a0ffe93df9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad8a379ff20fd19bba8324a0ffe93df9.exe
Resource
win10v2004-20240226-en
General
-
Target
ad8a379ff20fd19bba8324a0ffe93df9
-
Size
33KB
-
MD5
ad8a379ff20fd19bba8324a0ffe93df9
-
SHA1
e122e8f2bdae8e2435171a905bb197d72fa822e0
-
SHA256
010f76346c8135b98de685800b44a302678cb41404d5736b9fd024dd1eedfba0
-
SHA512
bde77f870ebbd834678f798cf9be2daea16a9ade50ba98abc5586b1775eec0df573b48e839e1b76eaab0e4a7fcce21ad6378b56913ade4479b619ed10ae43897
-
SSDEEP
768:Zi/hxiSLax484YnmcAW/Sm3FmgEZi7wN9Ch8:+xzLFYmu36iF8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad8a379ff20fd19bba8324a0ffe93df9
Files
-
ad8a379ff20fd19bba8324a0ffe93df9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE