Behavioral task
behavioral1
Sample
af14d73b79bc0deaf25c9b5c49c6bb31.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
af14d73b79bc0deaf25c9b5c49c6bb31.exe
Resource
win10v2004-20240419-en
General
-
Target
af14d73b79bc0deaf25c9b5c49c6bb31.exe
-
Size
977KB
-
MD5
af14d73b79bc0deaf25c9b5c49c6bb31
-
SHA1
18eb4013fc187961deb1b8732e2647a2e3d06c01
-
SHA256
d1227ba38a9e20e0b04197ebbe991317977d08ef3db4102c3a1ae7efbf2f0165
-
SHA512
80b943652fd694b5be1b46055ba2dd8a0030cd32e914077f2fc6147685393e47155c79ca1971321829fe13ec7d33f14ebc2c737e9da2da58e89a3e8e8447c4f7
-
SSDEEP
24576:NSLSUmzF36F+x1VKt6CmjuTg3b9Td7hpVB1kHtbb7x:N/USM+xPKt/M7hJ7hDB1kH57x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af14d73b79bc0deaf25c9b5c49c6bb31.exe
Files
-
af14d73b79bc0deaf25c9b5c49c6bb31.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB