Behavioral task
behavioral1
Sample
91f27e196d4dfeaf326f6e9dc40411e79a289410cabd8322e8a8e26328003e78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91f27e196d4dfeaf326f6e9dc40411e79a289410cabd8322e8a8e26328003e78.exe
Resource
win10v2004-20240412-en
General
-
Target
91f27e196d4dfeaf326f6e9dc40411e79a289410cabd8322e8a8e26328003e78
-
Size
424KB
-
MD5
abe2afb58c8e9d83b3773ba840179fbe
-
SHA1
e747572143cedc6ef529d51a37602b43c5cab906
-
SHA256
91f27e196d4dfeaf326f6e9dc40411e79a289410cabd8322e8a8e26328003e78
-
SHA512
0cc77df57792a5b81614402dc7c23ddf173c38ff03a4bba3dedabc9ee08abbb4d3a594518150c996e133a2af34b65699eb3cf13d6694d14aaae8fab2eb3dfcad
-
SSDEEP
1536:GOaB3SgfuTfwVi3mD3ACrSLOaB3SgfuTfwVito3ACrS:GOaB3S3LEi3mD3teLOaB3S3LEito3te
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91f27e196d4dfeaf326f6e9dc40411e79a289410cabd8322e8a8e26328003e78
Files
-
91f27e196d4dfeaf326f6e9dc40411e79a289410cabd8322e8a8e26328003e78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE