Behavioral task
behavioral1
Sample
a223d6fb96eee5809d1d52cf8a03bd3b57b3f5ce287a65b0093fe173aa169033N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a223d6fb96eee5809d1d52cf8a03bd3b57b3f5ce287a65b0093fe173aa169033N.exe
Resource
win10v2004-20240802-en
General
-
Target
a223d6fb96eee5809d1d52cf8a03bd3b57b3f5ce287a65b0093fe173aa169033N
-
Size
63KB
-
MD5
f218a4a06b527255f536012ba6b43ec0
-
SHA1
924d44f3407b64e5aa2663bae36f11e8610d1cb6
-
SHA256
a223d6fb96eee5809d1d52cf8a03bd3b57b3f5ce287a65b0093fe173aa169033
-
SHA512
e559c828c24726a0cf8007201414ba148c85c28947ffe59b18c353877e3796aff11d03d84587cbb850dd49b7f370eb452ce8f78ecb2deab799aa709056c2479d
-
SSDEEP
1536:jRsjdEIUFC2p79OCnouy8VDjcAG4RsfUK:jOm9Cshoutdjk4g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a223d6fb96eee5809d1d52cf8a03bd3b57b3f5ce287a65b0093fe173aa169033N
Files
-
a223d6fb96eee5809d1d52cf8a03bd3b57b3f5ce287a65b0093fe173aa169033N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE