Behavioral task
behavioral1
Sample
a8b5a826092baf602bd9ec7f86e3056f4fef896886f0a5bf6f8bd6a086bf1f3d.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a8b5a826092baf602bd9ec7f86e3056f4fef896886f0a5bf6f8bd6a086bf1f3d.exe
Resource
win10v2004-20240802-en
General
-
Target
a8b5a826092baf602bd9ec7f86e3056f4fef896886f0a5bf6f8bd6a086bf1f3d
-
Size
1.3MB
-
MD5
2d5fce53fa3f795def017d06d8bdf2a9
-
SHA1
a4158aabdf6d3bb911f99df9dea942616ff6f64f
-
SHA256
a8b5a826092baf602bd9ec7f86e3056f4fef896886f0a5bf6f8bd6a086bf1f3d
-
SHA512
9af918ca67ee5302c3c6afe76e1b7216a837636d27dd77d5f95cec5932cb68bd0a79b880b65ca65d6fa288b0e5d58203bdda51c7d646492ca563cf28ce366c80
-
SSDEEP
6144:KbTswnDL8X8422OgNEnaOjeN9smOVvIM8k/zB6Ya8:ip0aa8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8b5a826092baf602bd9ec7f86e3056f4fef896886f0a5bf6f8bd6a086bf1f3d
Files
-
a8b5a826092baf602bd9ec7f86e3056f4fef896886f0a5bf6f8bd6a086bf1f3d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE