Behavioral task
behavioral1
Sample
ad9c1b11ea50ba420ad85dfb3c80b38d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad9c1b11ea50ba420ad85dfb3c80b38d.exe
Resource
win10v2004-20240226-en
General
-
Target
ad9c1b11ea50ba420ad85dfb3c80b38d
-
Size
10.4MB
-
MD5
ad9c1b11ea50ba420ad85dfb3c80b38d
-
SHA1
a8eb6abd2540585be39ee65a7563067db71a2616
-
SHA256
f8b69f6251cd091e1bbdcb64690118043451e60940da145c45931167e2ab03fb
-
SHA512
13deff159e3ab7bb0ab3b977583ea84f8ae81202cbf06005db2b5d0212ae3494796e5a30dc4a5238780ddcfea02138527c86f21fc83bf6c0f21a02cc0a480502
-
SSDEEP
196608:kzHk3xa+SbFWS3gqImjK0moIkGp19Nna4DgN9A3Tbm1wFKP5FpiHd/Ie:kzHkBa+SymjK0IkGtbIwc5Li9Ie
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad9c1b11ea50ba420ad85dfb3c80b38d
Files
-
ad9c1b11ea50ba420ad85dfb3c80b38d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17.9MB - Virtual size: 17.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE