Behavioral task
behavioral1
Sample
awe.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
awe.exe
Resource
win10v2004-20230915-en
General
-
Target
7fb25e4accb7c59f078a369136160c0783c47c3a2da40c425c01ec834a99ded4
-
Size
2.8MB
-
MD5
889c9a898e5b5c39fec7d2ed2a98a6af
-
SHA1
69733c760d888641d3c7176b18340cbd0a2292ed
-
SHA256
7fb25e4accb7c59f078a369136160c0783c47c3a2da40c425c01ec834a99ded4
-
SHA512
6f08151df70dd1ebc07caffa5bdd66477963bbade36f227cb92887ef831a82014eae9db6d6ebe080f942d345ea4a9097e2d7717b5602334b7820246394814a2e
-
SSDEEP
49152:vskbVUWEdSjNAXljPZXIhuB9kLFOqMtHiTm/PSbW38pdzYE3Ra18Kw:vxSddSxWlrKLFvKHiS/6I8pT8bw
Malware Config
Signatures
-
resource yara_rule static1/unpack001/awe.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/awe.exe
Files
-
7fb25e4accb7c59f078a369136160c0783c47c3a2da40c425c01ec834a99ded4.zip
-
Data
-
awe.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX1 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX0 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE