Behavioral task
behavioral1
Sample
af383d088d1d1566a3e0ff568ad990f40e9c2d866ddae90496a9295b8376b033.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
af383d088d1d1566a3e0ff568ad990f40e9c2d866ddae90496a9295b8376b033.exe
Resource
win10v2004-20240508-en
General
-
Target
af383d088d1d1566a3e0ff568ad990f40e9c2d866ddae90496a9295b8376b033
-
Size
519KB
-
MD5
6e5bd7663abf2a4c7c250888a371168b
-
SHA1
8c6dca997f4ec5399a6156452992f24533709d0b
-
SHA256
af383d088d1d1566a3e0ff568ad990f40e9c2d866ddae90496a9295b8376b033
-
SHA512
872448388c1ac6babee943c7c9170a147512269b22b2a4a024544fbf4dc74302d2a741d31bbbbc8ca0e60ef103cd2a8cb78833d2d1b1fabee1fb061aba9d8f6c
-
SSDEEP
12288:dMvxtw7/GN42UhBWdd0pwcLp2AKxZm627lqcVDtDOy7o:OvXQnB+Wp3pRKxYl7McVD1O9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af383d088d1d1566a3e0ff568ad990f40e9c2d866ddae90496a9295b8376b033
Files
-
af383d088d1d1566a3e0ff568ad990f40e9c2d866ddae90496a9295b8376b033.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 896KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 480KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE