Behavioral task
behavioral1
Sample
a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468.exe
Resource
win7-20240221-en
General
-
Target
a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468
-
Size
363KB
-
MD5
ad4f6b9ace9998795638cb8b347249f8
-
SHA1
6a847e8f4fe7d25a78e3281a5669154190775d9c
-
SHA256
a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468
-
SHA512
aa9b9a9b2cf468c0bd8e7b87c1b21871e4b0a78bc31fbdf1b0a950cd731554d9c737dfb4f4398e1cb7e6b3f90b912ca639624d8834102cf17f013389726f7558
-
SSDEEP
6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE81:/4wFHoSQuxy3rTXIM181
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468
Files
-
a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE