Behavioral task
behavioral1
Sample
aa7fbd48b0cea4bf7846d41fe5106b3e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa7fbd48b0cea4bf7846d41fe5106b3e.exe
Resource
win10v2004-20240226-en
General
-
Target
aa7fbd48b0cea4bf7846d41fe5106b3e
-
Size
1.2MB
-
MD5
aa7fbd48b0cea4bf7846d41fe5106b3e
-
SHA1
886ea1c7356a49e99b9e751c32b4620b962d5acd
-
SHA256
0c30ca607a44c5001c710a35179e31f2e8e409db2fd6c36b6c5a4faa8ab4b192
-
SHA512
73b533418611f396c1adfbc7b1e968b9384398a6adb801830443021a3880930a757882e781e07f51aa0fb5ad28f07edd9b7fd9c7872581fac2b38e56999a001d
-
SSDEEP
12288:+6SmSIMvV4CmVPrhYF7tZmSeDdzeoGio9RIemVPrhYF7tZm:+6SmSdd41xrhi7qSe5q/IJxrhi7q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7fbd48b0cea4bf7846d41fe5106b3e
Files
-
aa7fbd48b0cea4bf7846d41fe5106b3e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE