Behavioral task
behavioral1
Sample
acd0a54ebd73195da93682a9a920bf24.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
acd0a54ebd73195da93682a9a920bf24.exe
Resource
win10v2004-20240226-en
General
-
Target
acd0a54ebd73195da93682a9a920bf24
-
Size
2.0MB
-
MD5
acd0a54ebd73195da93682a9a920bf24
-
SHA1
01c6d4c70276676469c8342655f665012f8df852
-
SHA256
321bff88e565ae4a6a088383273b30bcc6c57c24d094db46f0103e832fbc3fdb
-
SHA512
e0196d62402180c1f04115a867e5312e649deffb491ea06a0ab3b03ed82536fe8e520858097b4d2375afd017a13dc110c64c7c1e7507be7a698110df3758296f
-
SSDEEP
49152:YU1z7XrDh4uQefkWmcakLz0ibq6yqh+7m2LUQuQdiqcakLz0ibq6yqh:T1z3Dh47efkWmcakcibiqhd+UhQdiqcH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acd0a54ebd73195da93682a9a920bf24
Files
-
acd0a54ebd73195da93682a9a920bf24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE