Behavioral task
behavioral1
Sample
ae26364f5f5743939950bde402d30167.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae26364f5f5743939950bde402d30167.exe
Resource
win10v2004-20240226-en
General
-
Target
ae26364f5f5743939950bde402d30167
-
Size
2.6MB
-
MD5
ae26364f5f5743939950bde402d30167
-
SHA1
35d8e88618a5a8cbb7199bde1a335fbaaa31823e
-
SHA256
21bd25cf1b93774c5f22945cf0b5d581e4ef2eb357d1437483a979c5ef588721
-
SHA512
a090220d16d576bbef6ac09c07decaad7a0141f7d31b8257a02954bfc0a5d6f8aacf9da908bb4edc4f5710e81d40218972e9a90fdeaa02ae04d6e7705f482f13
-
SSDEEP
49152:5GY1SL2Q6IcYPqkDGyhykVTOfBQEOiCDPbJYay3:N1I8khhyIeaD9A3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae26364f5f5743939950bde402d30167
Files
-
ae26364f5f5743939950bde402d30167.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE