Behavioral task
behavioral1
Sample
2aceef58016f0f4d136bad7896a5bd13.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2aceef58016f0f4d136bad7896a5bd13.exe
Resource
win10v2004-20231215-en
General
-
Target
2aceef58016f0f4d136bad7896a5bd13
-
Size
2.9MB
-
MD5
2aceef58016f0f4d136bad7896a5bd13
-
SHA1
e5d43259fb49e0508437a8c8962a236e18827e03
-
SHA256
3840da0fb23a648dc048f31285aa64360c7c6243ae370756ab81ed9490072005
-
SHA512
046d25a55066aab3264e55a938327f21ff55e4e6f320513e5093028ba2ddd83d73808f8512a5e7a0d877744a6c8c3283a9d065f67c18d41a339d54bc576a5614
-
SSDEEP
49152:REBoR3/EJDwbJRKgB3+8G1HVbN74NH5HUyNRcUsCVOzetdZJ:Rx3YDwFgSah4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aceef58016f0f4d136bad7896a5bd13
Files
-
2aceef58016f0f4d136bad7896a5bd13.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE