Behavioral task
behavioral1
Sample
a1ead3ac57ca81a8046e4d1c4fa96570N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a1ead3ac57ca81a8046e4d1c4fa96570N.exe
Resource
win10v2004-20240802-en
General
-
Target
a1ead3ac57ca81a8046e4d1c4fa96570N.exe
-
Size
54KB
-
MD5
a1ead3ac57ca81a8046e4d1c4fa96570
-
SHA1
f0a12c54533d01e01c9279fd2c7fe6c8042c5cd7
-
SHA256
c54ef85688392c15c657c5e5adecd1e71f1b2a707cb6438c6893a854c570aa53
-
SHA512
24f220c0f450f054ca5b96d2a327c906b49a994da5e0b5d209f311c1742ee793219d1c2640d810f44dc95fec6b1db3bd7336d23d511d22101518e1bf1ca53ca8
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TzJlAmgvsBqSW+QxbDMCAW6R0zAmgvsBqSW+QxbDMCAW6R0+:fny1TAmgvsBqSW+cbICAW6R0zAmgvsBH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1ead3ac57ca81a8046e4d1c4fa96570N.exe
Files
-
a1ead3ac57ca81a8046e4d1c4fa96570N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE