Behavioral task
behavioral1
Sample
ac3f1c9998fb2dc1072caa889d54a23f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ac3f1c9998fb2dc1072caa889d54a23f.exe
Resource
win10v2004-20240226-en
General
-
Target
ac3f1c9998fb2dc1072caa889d54a23f
-
Size
234KB
-
MD5
ac3f1c9998fb2dc1072caa889d54a23f
-
SHA1
433866740936e76c5dbf6720bc5a30d6c8263b81
-
SHA256
1d9eb1bc0745202f1d82a88ee4313d0c86329e7fe1c43367f73e4e6e72812043
-
SHA512
e6baa90d8ebbcf40cef1b4f62ccf0435f818aac2730580d89e2b14d2907baa6743db9c17edb8a8fc692b510fd6083f2eb735c7a73ddf6226f714ec958f61dc20
-
SSDEEP
6144:0DnALMFmtNCgiyO7W1QgUS0MD4YDLJxw4WFriw7vb0Z4G:MnlmtNCHrSZWgRxw/FriwX0q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac3f1c9998fb2dc1072caa889d54a23f
Files
-
ac3f1c9998fb2dc1072caa889d54a23f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE