Behavioral task
behavioral1
Sample
ac631e060c21fa72680f509afab30788.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac631e060c21fa72680f509afab30788.exe
Resource
win10v2004-20240226-en
General
-
Target
ac631e060c21fa72680f509afab30788
-
Size
261KB
-
MD5
ac631e060c21fa72680f509afab30788
-
SHA1
4f03d28e6388e7bcf6c79b3e0c714dae64b27973
-
SHA256
8f7c6958b332772d7e49534698f6956d65bf371a40b7f6829e3f886b7df5f002
-
SHA512
23ea2db9489b2a059763a7ee044e63ae66d3b2adee4c218fec4b677c9caacd0b7fb960bab6a28df4fdd4cd5a62798707a1e19f0b909f2d9e129aaa90ab25e7d9
-
SSDEEP
6144:yhieHC2kSTF1x2N3WwoJPyamGZY6Klqc40oSY2j:PeHCbUcN3ZotwG8+0oShj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac631e060c21fa72680f509afab30788
Files
-
ac631e060c21fa72680f509afab30788.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE