Static task
static1
Behavioral task
behavioral1
Sample
aeaf07621c44ad8efa882b6d02735139ca04b12be0692c3a5d7e559dcf3a018c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
aeaf07621c44ad8efa882b6d02735139ca04b12be0692c3a5d7e559dcf3a018c.exe
Resource
win10v2004-20240412-en
General
-
Target
aeaf07621c44ad8efa882b6d02735139ca04b12be0692c3a5d7e559dcf3a018c
-
Size
4KB
-
MD5
6e862a28bc527873af2f1cd91fe87961
-
SHA1
c99e4cc243b5fd87db323a1364941c33ac97bf6c
-
SHA256
aeaf07621c44ad8efa882b6d02735139ca04b12be0692c3a5d7e559dcf3a018c
-
SHA512
7891d41436ff54ca74dd90201f6ee56d45578b4e6d9089b78df7848c986b33db6cc6d435b2fbcbd1dc361c45ef728c7fc55a7aada9d0b9015104b6ad0a7203bb
-
SSDEEP
96:LHmIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:iswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeaf07621c44ad8efa882b6d02735139ca04b12be0692c3a5d7e559dcf3a018c
Files
-
aeaf07621c44ad8efa882b6d02735139ca04b12be0692c3a5d7e559dcf3a018c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
v853pkso Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1920zgcx Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2176zvwt Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE