Behavioral task
behavioral1
Sample
adb9bc967c75f51978575b1fb773f66a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adb9bc967c75f51978575b1fb773f66a.exe
Resource
win10v2004-20240226-en
General
-
Target
adb9bc967c75f51978575b1fb773f66a
-
Size
1.5MB
-
MD5
adb9bc967c75f51978575b1fb773f66a
-
SHA1
dfcfd0234c6f30776515c96a70af1a3c65a10569
-
SHA256
2f48996180ec7e0a155a21818cb0b5422719dc788fbb0d5e3499eb77b9438af6
-
SHA512
bbf339b88197da36b2d77c1ce36fd366996ae1b042283d49a3a768c195ad6c4b5e24d7aa4ab892f1b204f6957cf5062f8697767be4c5fd44e4613f2e5010f42c
-
SSDEEP
24576:ZK82l/N73rqso5jkN+21PtGLAMuSIGb0sEYoSSHDYRnbdoW:OlF73GbAIMRM3IMNEYoS9do
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adb9bc967c75f51978575b1fb773f66a
Files
-
adb9bc967c75f51978575b1fb773f66a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE