Behavioral task
behavioral1
Sample
aaaf492c3a84b722374364cec44fb17f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aaaf492c3a84b722374364cec44fb17f.exe
Resource
win10v2004-20240226-en
General
-
Target
aaaf492c3a84b722374364cec44fb17f
-
Size
5.1MB
-
MD5
aaaf492c3a84b722374364cec44fb17f
-
SHA1
a847f92dd380b4fb491a6eee4f5fa3d9bd44dd26
-
SHA256
b87d03de80f3d169cc25b7c83b84d63c476ee28a90592f8fc0ecffdfaa7ef25b
-
SHA512
1abc40fc6bf043a9f4cf9eb49f3d1f6c3b15ada9ca65aa5d82454b48f881a6572fb8c8600b4b3494cdd080fd81d20a671d00e073e57ab24108cc9251d434a6d5
-
SSDEEP
49152:30mFCwkmJFify2hCCm18rYWEN/f3KCAphxXay35bkrfg8FYri+ts5EjdZwaA9jCh:VkgWm1NaCKx/30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaaf492c3a84b722374364cec44fb17f
Files
-
aaaf492c3a84b722374364cec44fb17f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE