Behavioral task
behavioral1
Sample
ac322b50a26640e202629faa1a516300.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac322b50a26640e202629faa1a516300.exe
Resource
win10v2004-20240226-en
General
-
Target
ac322b50a26640e202629faa1a516300
-
Size
133KB
-
MD5
ac322b50a26640e202629faa1a516300
-
SHA1
8d0aeb88a466cae0083465af10d0a2014ed71cc4
-
SHA256
32a06e37ae874ebc72fe2a8e4b1e2294aeb9b3ed7458851c2bc75e401ed225fe
-
SHA512
8f627d01759bdda2c14c509a836d5736ec76298ea6fede80775834c8f14e1e36edad18591497d1a106113bd6f8f2c24a27c253484f56f2a1d7c51ac3f9e39adc
-
SSDEEP
3072:mCD48LNLShNQ2c+GLvVjJWiIqeIOHRNTJBV3KgsO4JAkZQ:LD48MLQ2yLvVjJWtPbH3l6gsO4tZQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac322b50a26640e202629faa1a516300
Files
-
ac322b50a26640e202629faa1a516300.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE