Behavioral task
behavioral1
Sample
aae2a9618b109047a609354189e1d5ea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aae2a9618b109047a609354189e1d5ea.exe
Resource
win10v2004-20240226-en
General
-
Target
aae2a9618b109047a609354189e1d5ea
-
Size
1.3MB
-
MD5
aae2a9618b109047a609354189e1d5ea
-
SHA1
4509d9c7dce99e0f520cbff53deba953c79f9945
-
SHA256
db7e3338f75f56386f0801e7c3b3e049aef43b55994f7d942490b42c84ff2167
-
SHA512
7f673e21ea2eac1fde606967b1ae71a7d7da2c56ab9ea30740440e4cacc4e475ad3d782cc1746861cc0c7f580ceb91c5698ad4ee53f90f338c395aa44b2f7dbe
-
SSDEEP
24576:rqbw3VcS9uFFHD3PCDGvHcaSGGLkK4fG4IMpImw0mmmZ8rnKjWc:rFufv8aTtXIMpI70mmmZ8rKjp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aae2a9618b109047a609354189e1d5ea
Files
-
aae2a9618b109047a609354189e1d5ea.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE