Behavioral task
behavioral1
Sample
ada4a43f846b3d7aa8a638fc4714b66c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ada4a43f846b3d7aa8a638fc4714b66c.exe
Resource
win10v2004-20240226-en
General
-
Target
ada4a43f846b3d7aa8a638fc4714b66c
-
Size
1.8MB
-
MD5
ada4a43f846b3d7aa8a638fc4714b66c
-
SHA1
c85c80266381c80470530a7aa5be26c5f09e6b42
-
SHA256
faf9eded59e231cc46f57af2f411a09e88b5d77bdcf4231476d4835458d1b99f
-
SHA512
6f06b58d45f6b6dec1689ca4ff6175b7ed6a573fed8c1f8b8a79027e6e4973382191a564e99ec31566ee84e04f19e1154cb308d5f86a6f167d7c6380427af357
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq3:SCqm2Jpr0nNM7Dus7Nxi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ada4a43f846b3d7aa8a638fc4714b66c
Files
-
ada4a43f846b3d7aa8a638fc4714b66c.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE