Behavioral task
behavioral1
Sample
aac163a494dddbb2cd8189db598464d5.exe
Resource
win7-20240221-en
General
-
Target
aac163a494dddbb2cd8189db598464d5
-
Size
960KB
-
MD5
aac163a494dddbb2cd8189db598464d5
-
SHA1
d22726d92ac2dd3a25ebd46d2fb9a64429aa8771
-
SHA256
ce722ee5e87a597f592331f8a8d9efccd32d3f0a6581260ee311b22e227be092
-
SHA512
cb94367eb93a9be9af5291ed156ad7c5c2dabd3986f996e94a56fa00083dea6b29ba40a6d2c60ee54b4c38c0b1e6fbbbd30be85049f060cfdfa615e79d111165
-
SSDEEP
12288:X6Wq4aaE6KwyF5L0Y2D1PqLb6Wq4aaE6KwyF5L0Y2D1PqLx6Wq4aaE6KwyF5L0YZ:1thEVaPqLBthEVaPqLHthEVaPqLTthH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aac163a494dddbb2cd8189db598464d5
Files
-
aac163a494dddbb2cd8189db598464d5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bldvar Size: 38KB - Virtual size: 196KB
BSS Size: 12KB - Virtual size: 192KB