Behavioral task
behavioral1
Sample
a2e48fb04358f4d874231c3a9b781a7457428f9a78d71a3fac5e92284d1eb54e.exe
Resource
win7-20240221-en
General
-
Target
a2e48fb04358f4d874231c3a9b781a7457428f9a78d71a3fac5e92284d1eb54e
-
Size
102KB
-
MD5
8b92e0036420f0d512ba4426df82e43e
-
SHA1
e078f25c2745577c0b667dc60bd3e5ee47cc318e
-
SHA256
a2e48fb04358f4d874231c3a9b781a7457428f9a78d71a3fac5e92284d1eb54e
-
SHA512
170ff40abcb73ca806de97cf5b4a37789d1362761a0ef56bbd370d8f4004600a2655f0b2569a7b8001ae66f39d9ecdb15e13a0753f211608cfef574a5d061fa6
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw5Ivov1d3ZdpQm6hg:9hOmTsF93UYfwC6GIoutz5yLpRDN6hg
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2e48fb04358f4d874231c3a9b781a7457428f9a78d71a3fac5e92284d1eb54e
Files
-
a2e48fb04358f4d874231c3a9b781a7457428f9a78d71a3fac5e92284d1eb54e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE