Behavioral task
behavioral1
Sample
ac8a5538ef4d8974f80e75216d9a093f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ac8a5538ef4d8974f80e75216d9a093f.exe
Resource
win10v2004-20240226-en
General
-
Target
ac8a5538ef4d8974f80e75216d9a093f
-
Size
302KB
-
MD5
ac8a5538ef4d8974f80e75216d9a093f
-
SHA1
93eab09784da7b1e67f583637ab8e0fc8399368b
-
SHA256
d21f9c5a2363ae60658831278a141067c6b96bf151122b14f23bb916902f5fa3
-
SHA512
1f397ee30c08b1286663738e60447628052433bb67566d9f9fd57015b846ceab1866ecd1a4da609adf11117bf894cff155010e8c7c83617f5404608332071c36
-
SSDEEP
6144:kgKkFVjFprz+ymg69KBVuIzdpuAP7JXwdr9PfmQ:kLAZrzWgZCATI9m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac8a5538ef4d8974f80e75216d9a093f
Files
-
ac8a5538ef4d8974f80e75216d9a093f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE