Behavioral task
behavioral1
Sample
ae8297b74bb5252fb1e4d500e8c75b78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ae8297b74bb5252fb1e4d500e8c75b78.exe
Resource
win10v2004-20231215-en
General
-
Target
ae8297b74bb5252fb1e4d500e8c75b78
-
Size
10.2MB
-
MD5
ae8297b74bb5252fb1e4d500e8c75b78
-
SHA1
dfac83c141c97c1e28472a6c2c13b6b9e9f5c64a
-
SHA256
69c096220314159dc68a07c565b8efcf848bb551c4732f11c19ec203c324f774
-
SHA512
44bc6764c4e8068136bb84d7f5e8cd24326b456314e63ce8f3166aeeeec287d725e031c77c1f7155cb154f53c64452bc2ff1585bfa36d4f1cfc40c6aac69a4ec
-
SSDEEP
196608:/uwxfac9aHqENhvMY3VMzxRaJgwaHqEN:WwZ7E/vJMzyJzE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae8297b74bb5252fb1e4d500e8c75b78
Files
-
ae8297b74bb5252fb1e4d500e8c75b78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE