Behavioral task
behavioral1
Sample
a2b43679dcb890e7a01d846b675021d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2b43679dcb890e7a01d846b675021d0N.exe
Resource
win10v2004-20240709-en
General
-
Target
a2b43679dcb890e7a01d846b675021d0N.exe
-
Size
1.6MB
-
MD5
a2b43679dcb890e7a01d846b675021d0
-
SHA1
025b739fec665521747ad9356d51409203f7dd45
-
SHA256
d48fd8b3c55cd84b4a35aff0344eacf708e545846ca84a385127af5a6346a9a9
-
SHA512
5a7b07493ea23f7b73a39a08eda69eb440d1e8ad447be480fbfebab513a6d11453c4c835043657ef37b2e9c94df2e6d7e6ebf8b63ce8384aea96b0e516d566e9
-
SSDEEP
24576:0yOCE0HQlQ9En3sZIYwlar5so4UU1KCI8vJlvNtwicjSRH0qlWto6qeqU4XVmxVi:ACE0HQr30TwlaWZV4lkrLwEPWtLPFFMp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b43679dcb890e7a01d846b675021d0N.exe
Files
-
a2b43679dcb890e7a01d846b675021d0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ