Behavioral task
behavioral1
Sample
aa8c9232acdcad561ea2be6fdb9e4a41.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa8c9232acdcad561ea2be6fdb9e4a41.exe
Resource
win10v2004-20240226-en
General
-
Target
aa8c9232acdcad561ea2be6fdb9e4a41
-
Size
332KB
-
MD5
aa8c9232acdcad561ea2be6fdb9e4a41
-
SHA1
ce004d27bc19ddb32eb8bbcf28cf0812138af36c
-
SHA256
5d592193613eda535829d91de15bd0d853dfae00e85c869890fe5e3bc9d9b295
-
SHA512
805038e3571b9ae29a1a5b63a5db771c1f6d6df776128c21137a0d6d566b7a4c56ab30267bc921fe3d207de3c06ee159bc78433e83cfd8c7e6741901740dc136
-
SSDEEP
3072:1dEUfKj8BYbDiC1ZTK7sxtLUIGcJLUIWdEUfKj8BYbDiC1ZJtA9V3E/GbT6hnyO1:1USiZTK40p7USiZI9xEFh9qQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa8c9232acdcad561ea2be6fdb9e4a41
Files
-
aa8c9232acdcad561ea2be6fdb9e4a41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MyZYnZOO Size: 2KB - Virtual size: 1KB
vhkSbXMw Size: 11KB - Virtual size: 10KB
oTZjfkQo Size: 44KB - Virtual size: 43KB
thGsthQb Size: 3KB - Virtual size: 2KB
NLBweSjj Size: 512B - Virtual size: 46B
JSwfbDeq Size: 512B - Virtual size: 441B
CXsbdDFn Size: 121KB - Virtual size: 121KB
CWHqvnfb Size: 512B - Virtual size: 317B
VfamhbPo Size: 1KB - Virtual size: 1KB
uopuXqbx Size: 18KB - Virtual size: 17KB