7a5999c54f4588ff1581d03938b7dcbd874ee871254e2018b98ef911ae6c8dee.7z
- SHA256 63912423ec365577887c0459ef7926b14827113c28dad3770a2855dfc25c1bc3
Behavioral task
behavioral1
Sample
7a5999c54f4588ff1581d03938b7dcbd874ee871254e2018b98ef911ae6c8dee.exe
Resource
win10-20240404-en
| resource | yara_rule |
|---|---|
| static1/unpack001/7a5999c54f4588ff1581d03938b7dcbd874ee871254e2018b98ef911ae6c8dee.exe | family_atomsilo |
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
| resource | yara_rule |
|---|---|
| static1/unpack001/7a5999c54f4588ff1581d03938b7dcbd874ee871254e2018b98ef911ae6c8dee.exe | patched_upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/7a5999c54f4588ff1581d03938b7dcbd874ee871254e2018b98ef911ae6c8dee.exe |
AtomSilo Ransomware
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=141, id=243, version=40116,
count=27, id=242, version=40116,
count=1, id=199, version=41118,
count=9, id=259, version=26706,
count=39, id=261, version=27045,
count=1, id=259, version=27045,
count=127, id=261, version=26706,
count=34, id=260, version=26706,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=163, id=1, productName=Unmarked objects,
count=2, id=265, version=27045,
count=1, id=255, version=27045,
count=1, id=258, version=27045,