Behavioral task
behavioral1
Sample
aa86097b6fb9f4bcadf84b469cc2bfe0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa86097b6fb9f4bcadf84b469cc2bfe0N.exe
Resource
win10v2004-20240704-en
General
-
Target
aa86097b6fb9f4bcadf84b469cc2bfe0N.exe
-
Size
49KB
-
MD5
aa86097b6fb9f4bcadf84b469cc2bfe0
-
SHA1
49d34125bbac1b7538bae609094797d9b4e229fb
-
SHA256
37f14ff231ff1e7c59f872a5ec6f8d6d2bfa167410b2ccf96945170115a79f0d
-
SHA512
cf50f2c02c6a5ffce196099796cf71c833e4bb2b36a8173338d48e5dfdd126c07593aa97997690032d9c3c8f5c5b6ee826bd293ddeb02ded78e59b2e89694495
-
SSDEEP
768:n8eRH+MlFh0pXrL4i6sh7iQroCHmmbk2ElUN:n9l+Gi6sh7iQroCLMS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa86097b6fb9f4bcadf84b469cc2bfe0N.exe
Files
-
aa86097b6fb9f4bcadf84b469cc2bfe0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE