Behavioral task
behavioral1
Sample
a5ecf84777f00be9ce70d8fca510055804ce0fcf213d116160fd51ed33e66f1eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a5ecf84777f00be9ce70d8fca510055804ce0fcf213d116160fd51ed33e66f1eN.exe
Resource
win10v2004-20240802-en
General
-
Target
a5ecf84777f00be9ce70d8fca510055804ce0fcf213d116160fd51ed33e66f1eN
-
Size
34KB
-
MD5
392f01b294e1595036079ade2149c7b0
-
SHA1
c869cd661d85fbeeced1fe186d330efab25ca136
-
SHA256
a5ecf84777f00be9ce70d8fca510055804ce0fcf213d116160fd51ed33e66f1e
-
SHA512
3795ffa7eee87dd98f43c83f131725f32e066c3a2dc93e23bffa145acec28f5dac1a473ef21504e7e9391c1717ac6ce77458196724068188e9211174a110313c
-
SSDEEP
768:4noSEjp9Plchfr6TUqnbcuyD7UYK4pavvvZeee26666HEEExTtqqqqBtttt9:4oSEZWTUUqnouy8YXEvvvZeee5Ltttt9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5ecf84777f00be9ce70d8fca510055804ce0fcf213d116160fd51ed33e66f1eN
Files
-
a5ecf84777f00be9ce70d8fca510055804ce0fcf213d116160fd51ed33e66f1eN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE