Behavioral task
behavioral1
Sample
04a5699827b23e7af28eb149a1ea15141852f30335d42e1b4297abe67e939d61.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04a5699827b23e7af28eb149a1ea15141852f30335d42e1b4297abe67e939d61.exe
Resource
win10v2004-20240226-en
General
-
Target
04a5699827b23e7af28eb149a1ea15141852f30335d42e1b4297abe67e939d61
-
Size
149KB
-
MD5
aaa957c1dd7076f382e3f343c6c22851
-
SHA1
6fc2c686725d3a1c378ed68b3261fa7aeacdffbb
-
SHA256
04a5699827b23e7af28eb149a1ea15141852f30335d42e1b4297abe67e939d61
-
SHA512
72f24e2803443a283bc53b2cd49213162d54983312a89c8a4422b1e4537b26408bb4e5bbdd9cf4c7c56fe60929638f8c770e18903f6d113d9956a7cde5e1c50f
-
SSDEEP
3072:7bN0LwH/hUmnWac5jglEWWqDHwf1O4oSZdIW/8PV1uLKIlpJCXM6t:3NxPopWWqLo9oSZiVmlpJ96t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a5699827b23e7af28eb149a1ea15141852f30335d42e1b4297abe67e939d61
Files
-
04a5699827b23e7af28eb149a1ea15141852f30335d42e1b4297abe67e939d61.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE