Behavioral task
behavioral1
Sample
a6ef4e1ffe29390b87e70953526ecc44cba2c318531797f03ff51d6a365519d7.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a6ef4e1ffe29390b87e70953526ecc44cba2c318531797f03ff51d6a365519d7.exe
Resource
win10v2004-20240508-en
General
-
Target
a6ef4e1ffe29390b87e70953526ecc44cba2c318531797f03ff51d6a365519d7
-
Size
10.4MB
-
MD5
8a5b408d228efa48352eed74496d6acf
-
SHA1
d800e3dcc14b4164305d84a9ab45a8d1fdf6d5ac
-
SHA256
a6ef4e1ffe29390b87e70953526ecc44cba2c318531797f03ff51d6a365519d7
-
SHA512
f1e549139840b3ba3c4a28d1bccbf57363c9a2d72688b6145e81e62dc2bf1b9fa9f0826e190681a13bdb4bb187a5313f9ad6ea50e5e84e5a7328089305aed5db
-
SSDEEP
196608:A3Fhb63DU64XSrw8u7gcOSqcX7SRyAQy9sPOHIWvPZyhdz37V1CHj7jnz7/A1Yc:AVhb8t4XiNrIXeRyy9DIWvByhdz3p1CQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ef4e1ffe29390b87e70953526ecc44cba2c318531797f03ff51d6a365519d7
Files
-
a6ef4e1ffe29390b87e70953526ecc44cba2c318531797f03ff51d6a365519d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE