Static task
static1
Behavioral task
behavioral1
Sample
AppxPackagesManager.exe
Resource
win11-20240214-en
General
-
Target
AppxPackagesManager.exe
-
Size
47KB
-
MD5
bb7205a03b7301351bca50c348d5273f
-
SHA1
c1192b3acc803716ddace002c53179edc8f91a42
-
SHA256
2e3eaeebe8d7980517c347950c6edad708f8ce83373e5e13b1d59bae2f35d8f5
-
SHA512
e5f70a54109ddd9f24726af6dbf57a10373011398ab6570c822a1818bd8f00386b39bfb0865f1a148d09bc4e713ef81f9fa4ee45b94ecda100323a4674aaee51
-
SSDEEP
768:c1CogComO7Q29sOcqtH5uqanxJF2bCfSuCjQg3GoPql+JtYcFtVc6K:coogxG29suranxH2ufS/DhJtVcl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AppxPackagesManager.exe
Files
-
AppxPackagesManager.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ