Behavioral task
behavioral1
Sample
adfe62063276ca1e75d32586e7493ddf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adfe62063276ca1e75d32586e7493ddf.exe
Resource
win10v2004-20240226-en
General
-
Target
adfe62063276ca1e75d32586e7493ddf
-
Size
133KB
-
MD5
adfe62063276ca1e75d32586e7493ddf
-
SHA1
9191808e668f64310c6ee73c6e92f90472b3b4fa
-
SHA256
c7587dffa83a427054360cb3191821c0d8d163ae3e9dff32f4cfd5cbf8d26515
-
SHA512
317f01c2b462fbb9e2e6d1f606609f9a43a381a553c0c96087479b2d6a6ff75e434f3b10fc83b9f2680f0f56f86b99146779d86eaf52e50aa47a2df559d36ad9
-
SSDEEP
3072:QyrZ1vAPMqwYv9OxAPmdDmBG+oNHQrgy9AoAhsTQ:Q0fvAUvKwximdhHpy9AFIQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adfe62063276ca1e75d32586e7493ddf
Files
-
adfe62063276ca1e75d32586e7493ddf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE