Behavioral task
behavioral1
Sample
08a1ab9bee563df2555cab4d97a7e8d76506bb2316be2d02bced766a59e0841d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08a1ab9bee563df2555cab4d97a7e8d76506bb2316be2d02bced766a59e0841d.exe
Resource
win10v2004-20240802-en
General
-
Target
08a1ab9bee563df2555cab4d97a7e8d76506bb2316be2d02bced766a59e0841d
-
Size
19KB
-
MD5
d2243c602cde2c7dca07275cd5f1e7fb
-
SHA1
ba1108919f1ad081ed54c7843f3ff55d519b9830
-
SHA256
08a1ab9bee563df2555cab4d97a7e8d76506bb2316be2d02bced766a59e0841d
-
SHA512
251646da281a1e48ace7b19d333f5b3494a827fbe1f74d4eeda1363b2bed8cb89ff22b3f70e65431e09891d452780975154b06c52b5c2acf50f9420c42b1b903
-
SSDEEP
384:ZPkT+AiA0tS4VeP08+pqsiCuzZoCiky88zjkS6Ig5E6X41KOUI+:Z8ktroP03qs1tQ9p5E6o1KOU3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a1ab9bee563df2555cab4d97a7e8d76506bb2316be2d02bced766a59e0841d
Files
-
08a1ab9bee563df2555cab4d97a7e8d76506bb2316be2d02bced766a59e0841d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE