Behavioral task
behavioral1
Sample
ab95199cc983fd181650aa58f20cb87e.exe
Resource
win7-20240611-en
General
-
Target
ab95199cc983fd181650aa58f20cb87e.bin
-
Size
6.6MB
-
MD5
ab95199cc983fd181650aa58f20cb87e
-
SHA1
8171dd9f55b8e8b5f4cf29987ce62934e4d5ae80
-
SHA256
4b055f11c7472044a423a4b5b8142186563f32d8c77f58e5ccc1b182bae8157d
-
SHA512
8ebea428513a25d75ba6c57e57a22ba7577492939a3a3fdafea119cf8a39e50f53c62a7e680f1d7776f261d7720ff485f3ba0812178de55428333597dea756f9
-
SSDEEP
196608:F/c1e+DGTJ5Q+ICXHqNFIv7wwPgsy52f24:F/+aJGIgF+7wwNyIf24
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab95199cc983fd181650aa58f20cb87e.bin
Files
-
ab95199cc983fd181650aa58f20cb87e.bin.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE