Behavioral task
behavioral1
Sample
adf7c1f0a81e477c0cbe1190c2c654d6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adf7c1f0a81e477c0cbe1190c2c654d6.exe
Resource
win10v2004-20240226-en
General
-
Target
adf7c1f0a81e477c0cbe1190c2c654d6
-
Size
1.6MB
-
MD5
adf7c1f0a81e477c0cbe1190c2c654d6
-
SHA1
fe9e6edc9a1a70f317c660f21b0c8dc1c54cee7f
-
SHA256
91922d106ede5a97dc78303f7eced9a18a361db76791976afadbd8c63282e10c
-
SHA512
fe64f54ecf4b482a71d2c9231630b2afcab2c343a95bf1a21c4e6c2eadc86b9c798e803cd362b75e879672e2a3e045aab099c225407dcc6f70737e20e493c11d
-
SSDEEP
49152:yMtVS/wA83uOvcakLz0JCg+MoECUiWcakLz0O:yMtVS/f83bvcakcJCg+MoFUiWcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adf7c1f0a81e477c0cbe1190c2c654d6
Files
-
adf7c1f0a81e477c0cbe1190c2c654d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE