Behavioral task
behavioral1
Sample
aab6860ac6636ae7ae9761e5fae8fdae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aab6860ac6636ae7ae9761e5fae8fdae.exe
Resource
win10v2004-20240226-en
General
-
Target
aab6860ac6636ae7ae9761e5fae8fdae
-
Size
2.6MB
-
MD5
aab6860ac6636ae7ae9761e5fae8fdae
-
SHA1
8fb2e88c48beaf669f89933ee58e42408e79aac6
-
SHA256
3b400896b9f6232f0f5bfb92f5ec13211f21fe92540543eedca7e2131b8f3a3f
-
SHA512
50e0476f806e8b7f25b5b873ef4406a01679638d2754306e8318841a2444ee648373375232c16a3cbd5e88788a07e3d2b2c962202d8243ab7a0aa4810755ea07
-
SSDEEP
49152:6OWtVawFunDTDyjpL2edKGlJCd5/2b7lbPyk9bdXYjHGay3:gmweOjpLI0my3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aab6860ac6636ae7ae9761e5fae8fdae
Files
-
aab6860ac6636ae7ae9761e5fae8fdae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE