Behavioral task
behavioral1
Sample
aa78c23ab607894b04366817b68805d1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa78c23ab607894b04366817b68805d1.exe
Resource
win10v2004-20240226-en
General
-
Target
aa78c23ab607894b04366817b68805d1
-
Size
876KB
-
MD5
aa78c23ab607894b04366817b68805d1
-
SHA1
81ad82ba17eeeeeead5d5f66452ffe6a8eef8017
-
SHA256
5410b79452d1015f41c3e6445f0561234be2684e8f34604abcc68e544c5a36df
-
SHA512
ac39239f4c79d6ed6641aadc07f57b56a36c089d2494d9425b19217895ce9bbda24a685b4c423e8839bf042b9bc037bc9b0fbd4d5cc48cf594194187cfae4ace
-
SSDEEP
24576:+Mo9wyte68cGxmQKvqufgtzfl0ZMZRbBiFPP02Ld:HzUbGxmQKloT0ObbsFJd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa78c23ab607894b04366817b68805d1
Files
-
aa78c23ab607894b04366817b68805d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 873KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE