Behavioral task
behavioral1
Sample
ae2be28f4c6c63c3a851de372ee98615.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae2be28f4c6c63c3a851de372ee98615.exe
Resource
win10v2004-20240226-en
General
-
Target
ae2be28f4c6c63c3a851de372ee98615
-
Size
5.1MB
-
MD5
ae2be28f4c6c63c3a851de372ee98615
-
SHA1
15292daa728da83a74b8798a075f437bc0b5283f
-
SHA256
3d41915cfb7d86d473bf9ce53f49718b93a0c72a81fd2a267f5058b214c8a7d7
-
SHA512
0fa9922e21469afcfda5fa36ce12e4c570d201c660b0ccfbbd1d40d716caee14f2de3d58d3a51ac90f2b150349dce270c3a8cc47d09d12e6192b66916f56ded5
-
SSDEEP
49152:vUnosy0muQyWYK6K2ilqWY2ZNTVN7+C2s1N1uwpay3lhUKm9YllQY9k/qJoE7hvQ:vjaQy26EJDm/k3bUK/lRqwhF4ZTcg3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae2be28f4c6c63c3a851de372ee98615
Files
-
ae2be28f4c6c63c3a851de372ee98615.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE