Behavioral task
behavioral1
Sample
a6ca72960d16ef4eab3b26cd8f7042a07b886bfdeeff6475333db54d0486e68dN.exe
Resource
win7-20240708-en
General
-
Target
a6ca72960d16ef4eab3b26cd8f7042a07b886bfdeeff6475333db54d0486e68dN
-
Size
2.4MB
-
MD5
2a138a058647d06c8744d234033f8150
-
SHA1
8775cdd663871635b31c1ca887cf92cf6bf1bcdd
-
SHA256
a6ca72960d16ef4eab3b26cd8f7042a07b886bfdeeff6475333db54d0486e68d
-
SHA512
2ded8aa9a5f252d8465365569658d3f4c4dd524209661f75deb28bf6262c123ef71c055e9e61beb77f7226abcb6b333473673a93b4d4dd1819a7138cb6e90e0c
-
SSDEEP
49152:76MlKPENVQQneN+kkfdfDEo8eXZI0VG8O1GZngZHR169dJc5cPxlvvR:73lUENOJOBhXZ+8OoaZHiCcJFR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ca72960d16ef4eab3b26cd8f7042a07b886bfdeeff6475333db54d0486e68dN
Files
-
a6ca72960d16ef4eab3b26cd8f7042a07b886bfdeeff6475333db54d0486e68dN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE