Behavioral task
behavioral1
Sample
aa0a6ff9f6f42bdf19fcf26928e0c31b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa0a6ff9f6f42bdf19fcf26928e0c31b.exe
Resource
win10v2004-20240226-en
General
-
Target
aa0a6ff9f6f42bdf19fcf26928e0c31b
-
Size
5KB
-
MD5
aa0a6ff9f6f42bdf19fcf26928e0c31b
-
SHA1
35d180bb41e4f10cd4cc07ccb2006d18b367ed2d
-
SHA256
db281c3929016febc5044ba06440044ba5da5140c54b5b69d8413528ffae6b6d
-
SHA512
d9a59d167ebc8775bddc473ec229f2a04d7505bb723fe3f3070ff68b8634cc582c18706e63007b8e54173ce9492d34a138f032f0aafa89b687b67bcdbbcaa079
-
SSDEEP
96:Y6TAYO580oGA5rpX1GEOgoMM2paZLqrLQY1XSu5wl02CBN6ADr9xr:jA2LLrRbOg9re6QY1r58CBNhrr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0a6ff9f6f42bdf19fcf26928e0c31b
Files
-
aa0a6ff9f6f42bdf19fcf26928e0c31b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE