Behavioral task
behavioral1
Sample
aa629b5e7a212a8e8e5b22fed1239d91.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa629b5e7a212a8e8e5b22fed1239d91.exe
Resource
win10v2004-20240226-en
General
-
Target
aa629b5e7a212a8e8e5b22fed1239d91
-
Size
1.8MB
-
MD5
aa629b5e7a212a8e8e5b22fed1239d91
-
SHA1
804a568f9bf6b53142daf5d059776878eb0ce9cd
-
SHA256
93b3a0f68b1111a434a1b2f17e29b58f234a0fbc2255459a0f17ce2178952b65
-
SHA512
089e646ede427f6e6d2a7cc740de514d964c656829ed969c8d3f53e634a6d3a24eb2d0df16d52f1f6b8dd4be0b94176dedb8bc19d9ea4875d0ae9359f8f57b6d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHY:SCqm2Jpr0nNM7Dus7Nx24
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa629b5e7a212a8e8e5b22fed1239d91
Files
-
aa629b5e7a212a8e8e5b22fed1239d91.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE