Behavioral task
behavioral1
Sample
aa2bd0ea06d0fc099bf630c084556bd4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa2bd0ea06d0fc099bf630c084556bd4.exe
Resource
win10v2004-20240226-en
General
-
Target
aa2bd0ea06d0fc099bf630c084556bd4
-
Size
1.3MB
-
MD5
aa2bd0ea06d0fc099bf630c084556bd4
-
SHA1
f81476c41ca3bb2b145a1a1bdf8781d30b20a1ba
-
SHA256
cb6c8a78f72f456d5a80e4eae02f84e9bc886e112ce7cbe3838f45aa17c66559
-
SHA512
67d6d3270c2810ad0cd6d714f1cdc37a3146f1abe96fd36de54bbc0bd7e5d827694b9d1b48b3e75479844ef72d877422e761451af5f8843f4a92f8251e4a505e
-
SSDEEP
24576:ObGcsEZTOEJNmnDQwUGQNVHyZmXx4Srxl9oUEwYKKC120TNP+TQ:O6c7hOLnDvQ37Xx4Sj9oUEwYKKC120T/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa2bd0ea06d0fc099bf630c084556bd4
Files
-
aa2bd0ea06d0fc099bf630c084556bd4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 876KB - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 478KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB