Behavioral task
behavioral1
Sample
aae6c2b7084e9f10392dd92cff0a3523.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aae6c2b7084e9f10392dd92cff0a3523.exe
Resource
win10v2004-20240226-en
General
-
Target
aae6c2b7084e9f10392dd92cff0a3523
-
Size
7.8MB
-
MD5
aae6c2b7084e9f10392dd92cff0a3523
-
SHA1
1ed8a4d688f38979c940eec70fea468eb6a9398e
-
SHA256
6b3110578bc81b90692e67af0d6f42f3c61c4e33d09d6908458cd19f3ea01d51
-
SHA512
1bd5548c3734c16720022e84c2396c68ef49da69f13044e240273d7f356288543bc608c0838470117f2ec17904710fe2e9684ba3977aadc5f744f7906fed384c
-
SSDEEP
196608:95dlirSdydlirmLJX9dlirSdydlirt9pC1OdlirSdydlirmLJX9dlirSdydlir:9ld49XJdZpCGd49XJd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aae6c2b7084e9f10392dd92cff0a3523
Files
-
aae6c2b7084e9f10392dd92cff0a3523.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE