Behavioral task
behavioral1
Sample
a6140875ef4d219d2be5a6b7a10312d8758f1bcd63387884e2738e0409c466fc.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a6140875ef4d219d2be5a6b7a10312d8758f1bcd63387884e2738e0409c466fc.exe
Resource
win10v2004-20241007-en
General
-
Target
a6140875ef4d219d2be5a6b7a10312d8758f1bcd63387884e2738e0409c466fc.exe
-
Size
29KB
-
MD5
11e9ad3de21a04a016cd15c9aafac011
-
SHA1
53cfbbe6648d30f05ed084268fc63fd0051ba0cf
-
SHA256
a6140875ef4d219d2be5a6b7a10312d8758f1bcd63387884e2738e0409c466fc
-
SHA512
fa32c70154036775957cb4883ed87dff1aa6b4014eb48a4247192fc68802097455d54e1f7f30f183220bf6c73a0a4ebf6e5068b532e6f5505b7b59faf9e24dae
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/za:AEwVs+0jNDY1qi/qO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6140875ef4d219d2be5a6b7a10312d8758f1bcd63387884e2738e0409c466fc.exe
Files
-
a6140875ef4d219d2be5a6b7a10312d8758f1bcd63387884e2738e0409c466fc.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE