Behavioral task
behavioral1
Sample
ac9f9b8c952d23c6bb54f1b6dc7972be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac9f9b8c952d23c6bb54f1b6dc7972be.exe
Resource
win10v2004-20240226-en
General
-
Target
ac9f9b8c952d23c6bb54f1b6dc7972be
-
Size
2.0MB
-
MD5
ac9f9b8c952d23c6bb54f1b6dc7972be
-
SHA1
d2ceffe42f0c3c92aa4a64a58d005bafbd048bf6
-
SHA256
6e6ff550afc9feb0d0ef9d65fadd7c1e6933ce9d54dcf7b5407fe5bf5e5ce6ce
-
SHA512
2d9582c6b0fc684f7628c91fab9e97a61bb9f801546760bac397a45a5b24c81e42135458e150206c4cdd80e52527d419a0e94b30bf688349cefdbd13dc692aad
-
SSDEEP
49152:CQAkKS1HcHPJ3tbbpScakLz0ibq6yqhwkovYQ/BH/KcakLz0ibq6yqh:IkK+HcHPJdbbpScakcibiqhw5vB5HycH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac9f9b8c952d23c6bb54f1b6dc7972be
Files
-
ac9f9b8c952d23c6bb54f1b6dc7972be.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE