Behavioral task
behavioral1
Sample
ad7db590e981a4876a20f55ab157034f22695498b31ab8a594d98541d63ff70c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad7db590e981a4876a20f55ab157034f22695498b31ab8a594d98541d63ff70c.exe
Resource
win10v2004-20240709-en
General
-
Target
ad7db590e981a4876a20f55ab157034f22695498b31ab8a594d98541d63ff70c
-
Size
18KB
-
MD5
818ab6771af58dee883d169c08670108
-
SHA1
f2c7a0ac3c4312eced03ef417d641e59f74cb82f
-
SHA256
ad7db590e981a4876a20f55ab157034f22695498b31ab8a594d98541d63ff70c
-
SHA512
1afcd16517103ad8a6dbedd47fa8eb029ce7d1ad1c8453abe33fa4922eaf1b6dc2aa124101cb3c886c0ded539914143be1142b5647701de716d931376a4c6263
-
SSDEEP
192:nayMLjRlelLj9Zhx2sdH9g7ABQ8rnrprWrf8ZsqiZPX1HPRUQQDb8rAlRLa:aygjzwLZZhx22HOGQ8xy7MiPRJiRe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad7db590e981a4876a20f55ab157034f22695498b31ab8a594d98541d63ff70c
Files
-
ad7db590e981a4876a20f55ab157034f22695498b31ab8a594d98541d63ff70c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE