Behavioral task
behavioral1
Sample
aa4cea97667dcb42dbdd6e2f4a423021.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa4cea97667dcb42dbdd6e2f4a423021.exe
Resource
win10v2004-20240226-en
General
-
Target
aa4cea97667dcb42dbdd6e2f4a423021
-
Size
1.8MB
-
MD5
aa4cea97667dcb42dbdd6e2f4a423021
-
SHA1
2d2a846728f3b6346bd97223b6e578a34ce31fdc
-
SHA256
327ddbbce6ee3c0728ebc9039ac2482c28385d08e4a20510a00f854e1cd062ce
-
SHA512
87e6f90219f7a4d9df38d29b8d59e9794acabd79fff8ecf3b07a320e3c0648ebb3b47f9633c9d19a8015b9b607b4c184e6f31d41999e05256400adad40f904af
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqW:SCqm2Jpr0nNM7Dus7NxD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa4cea97667dcb42dbdd6e2f4a423021
Files
-
aa4cea97667dcb42dbdd6e2f4a423021.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE