Behavioral task
behavioral1
Sample
ac58974e59ee85c45c2753977547211f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac58974e59ee85c45c2753977547211f.exe
Resource
win10v2004-20240226-en
General
-
Target
ac58974e59ee85c45c2753977547211f
-
Size
5.1MB
-
MD5
ac58974e59ee85c45c2753977547211f
-
SHA1
a93a1d5f7504cca7dac5e6cdec0c7385c02da316
-
SHA256
bdaee93044a8b5c5407acd3173b9411a4e22c7307bd6b0616703a3584a8094a0
-
SHA512
f67f25f56d68aceb7e4f4916830e22b35850b09650ca636327883e7156b5bda341fd8515f0eb7de63ec53516a74f0684ddd50f2dfd6b5043df5e413653796e3e
-
SSDEEP
49152:/sbL2DNlMHjZo76O3ptUifrFlQ1sQIkGBMtit4TG3Xay35bkrfg8FYri+ts5EjdB:MGz76fiYNTC30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac58974e59ee85c45c2753977547211f
Files
-
ac58974e59ee85c45c2753977547211f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE