Behavioral task
behavioral1
Sample
aa2d78949eccc255c0fd93f2159f6434.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa2d78949eccc255c0fd93f2159f6434.exe
Resource
win10v2004-20240226-en
General
-
Target
aa2d78949eccc255c0fd93f2159f6434
-
Size
65KB
-
MD5
aa2d78949eccc255c0fd93f2159f6434
-
SHA1
c020f1b99a2af5cb270de7d0c989651ff8c1ebd8
-
SHA256
2ff4659c82841281d053856502b5fd0d2c6a2eb94c501177d0af77b1b8de7eef
-
SHA512
948615ce7d85908c4c7be08e04c9535a5f0b7784b95d7be6266ac72f7ef7561af774229179ac44593380abd6651787196f304c472b7a031f746891b384f69793
-
SSDEEP
768:eUS5VAUuDmOjdzXM0EuXO/5Zd00UBhbj9FqTFNVNsoc6r3qcokQAliFfMaFP:e7ALeBD00UTfnWFN7soc6r35ok/mR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa2d78949eccc255c0fd93f2159f6434
Files
-
aa2d78949eccc255c0fd93f2159f6434.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE