Behavioral task
behavioral1
Sample
ae0aa146846921a945eb2d9059a69c1c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ae0aa146846921a945eb2d9059a69c1c.exe
Resource
win10v2004-20240226-en
General
-
Target
ae0aa146846921a945eb2d9059a69c1c
-
Size
46KB
-
MD5
ae0aa146846921a945eb2d9059a69c1c
-
SHA1
c731ad68a373db612d4f644e993aff971639873b
-
SHA256
4871be1b72a7996e4c92a286f05444bb64d460d406db4701535e1ccf7bd0ce19
-
SHA512
717e218f4967a1271d74217b9086130472154f3d9aaf83fc7fd68899821b4bd5350d4f0d907b4dfb0812a45b8d70aa5daeee341e5a59e36c9893810db5046b8b
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFDp6PuLuPwzVNJ0i:SKcR4mjD9r823FDp6W6IzV7z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae0aa146846921a945eb2d9059a69c1c
Files
-
ae0aa146846921a945eb2d9059a69c1c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE