Behavioral task
behavioral1
Sample
4aa8566af719d0ddd8ed04ed3665d691.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4aa8566af719d0ddd8ed04ed3665d691.exe
Resource
win10v2004-20231222-en
General
-
Target
4aa8566af719d0ddd8ed04ed3665d691
-
Size
6.4MB
-
MD5
4aa8566af719d0ddd8ed04ed3665d691
-
SHA1
469a26d46abb037da3e25e3856e1a09b1f524d6d
-
SHA256
5091c44a2a6f96c945a797505e2834f1d483cd890724ca9733e9a5658ec5e791
-
SHA512
37976049749db963e7e3e222f274fed71b5c5190de0541981155b7a77c46c9db2b741153897c27bdef9c0d384f5c95e396008e4eb4445a70a149bf6115e92223
-
SSDEEP
98304:Q5dvHV2bRgXVGVAclznDx0NkdsXNB12L79wp9npmMiK0L9jOlWXQTd2yDIP4e3n3:sdvwbRglG9jDc8sbq6vmamwLQ1D3nB2i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aa8566af719d0ddd8ed04ed3665d691
Files
-
4aa8566af719d0ddd8ed04ed3665d691.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 548KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1010KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ