Behavioral task
behavioral1
Sample
aa20395ca70eb14a3c1b8e2965d1c471.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
aa20395ca70eb14a3c1b8e2965d1c471.exe
Resource
win10v2004-20231215-en
General
-
Target
aa20395ca70eb14a3c1b8e2965d1c471.exe
-
Size
2.0MB
-
MD5
aa20395ca70eb14a3c1b8e2965d1c471
-
SHA1
d35195db7c9648b794a566d80b106409a661876e
-
SHA256
bb196a15785c6b28bdceaf2c017d7c0c1308773e73454b11bf8074c67a1ee56d
-
SHA512
02f1fb79d252c2c4950ae5442ce9684eeeaecde8e55fd0d4931ad852fe80d71c6b04ea213d6fe2defe37fd7e38232ecae6a6f78a651c8e05591da2f01319b281
-
SSDEEP
49152:bJWeRQv9A1BVzQ+QaZTmTBb7AOlNR0S6e874RFSILI:bIA1zQjiTmTBbTOXp4jSIM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa20395ca70eb14a3c1b8e2965d1c471.exe
Files
-
aa20395ca70eb14a3c1b8e2965d1c471.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB