Behavioral task
behavioral1
Sample
ac4a5e4b9c3fb520f31e560c390dc816b5eaf192a145ea43e0ba246eddc30745.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ac4a5e4b9c3fb520f31e560c390dc816b5eaf192a145ea43e0ba246eddc30745.exe
Resource
win10v2004-20230915-en
General
-
Target
ac4a5e4b9c3fb520f31e560c390dc816b5eaf192a145ea43e0ba246eddc30745
-
Size
673KB
-
MD5
9e2115c15c50e91e01fb02d81e2faf40
-
SHA1
af5da6242dc8ab5e002f4a6db7850ad698622eb2
-
SHA256
ac4a5e4b9c3fb520f31e560c390dc816b5eaf192a145ea43e0ba246eddc30745
-
SHA512
791fc21a1c1b716902d2c051d0b7fc22d9f76af9cece9115d407fbab90dc4061a94a8b2cfd8617eaf9559d59ba53b545ef6e16687f8bc8c41407b6de35b3e3be
-
SSDEEP
12288:um5QW6uLxBKkYFMWKv9w1iFPyKJcj33wW:mWjwkYyWKFwHVrwW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac4a5e4b9c3fb520f31e560c390dc816b5eaf192a145ea43e0ba246eddc30745
Files
-
ac4a5e4b9c3fb520f31e560c390dc816b5eaf192a145ea43e0ba246eddc30745.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 672KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE