Behavioral task
behavioral1
Sample
ac51b9098d2a8e731652b8cbf20429c5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac51b9098d2a8e731652b8cbf20429c5.exe
Resource
win10v2004-20240226-en
General
-
Target
ac51b9098d2a8e731652b8cbf20429c5
-
Size
1.8MB
-
MD5
ac51b9098d2a8e731652b8cbf20429c5
-
SHA1
14d6eea3e8f1055caef7b73d3a390f3edf2f7617
-
SHA256
1287886d7736604fa0ebc5f4e6a796f24e330ff860518d8cf4bbec75c7a5aaaf
-
SHA512
6146cfbfe5a47a2551f5b04a8cd404accf43ff11901acd6832c7762092da3d66045924f507da0f2976440d640609cf1c1bf4c1079e98d6a3b8ae05fcabc7c353
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq6:SCqm2Jpr0nNM7Dus7Nx7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac51b9098d2a8e731652b8cbf20429c5
Files
-
ac51b9098d2a8e731652b8cbf20429c5.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE