Behavioral task
behavioral1
Sample
aa0b2c4da2c8ee92eb2ed667085be023.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa0b2c4da2c8ee92eb2ed667085be023.exe
Resource
win10v2004-20240226-en
General
-
Target
aa0b2c4da2c8ee92eb2ed667085be023
-
Size
1.5MB
-
MD5
aa0b2c4da2c8ee92eb2ed667085be023
-
SHA1
0b506ff2725436bda8ca33f5c637561a42fe50cf
-
SHA256
2adaf76fdc62836f2678da06fdce2069fde60f5153e54083cfc3edeaf40a7370
-
SHA512
bd05855ac19f44df6dfa285e0e6fe1e44c1af811a538db84fa8b8c7461cad7b7238962000e02419ccf698e52b0ab6e4f95f6a6fbe1da01e8524687e7585c1a64
-
SSDEEP
24576:YhRygGiMaGlsZeazg8BzeYEmotWOtVpW4jITVyuz2PMAsW:Y2a2sMazg8BzeVmlOtVpl60Vs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0b2c4da2c8ee92eb2ed667085be023
Files
-
aa0b2c4da2c8ee92eb2ed667085be023.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE