Behavioral task
behavioral1
Sample
aa5fd28b94ddbd0c73c4fb2eb3e179f0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa5fd28b94ddbd0c73c4fb2eb3e179f0N.exe
Resource
win10v2004-20240709-en
General
-
Target
aa5fd28b94ddbd0c73c4fb2eb3e179f0N.exe
-
Size
27KB
-
MD5
aa5fd28b94ddbd0c73c4fb2eb3e179f0
-
SHA1
65db93843e0f2e7e0493c56064a20aeb3d329d55
-
SHA256
cecaf5f2bf28280d8a0a5e1b92bf3385b65dc375c658b7adf3de45dd4a3f4f7a
-
SHA512
eeac66ecfad9c823f5c0d85aed8dc342b109a2d4a25c5c8e1fe7c9b843ff4201c1db8b259dac59a7819f84535d2b1f50bc28c7439558331717d260f21a82f57e
-
SSDEEP
96:XbLD3E3kxkYOFsHe+WRIJVge6ygK4bd9u8XhyXrGSccSZuB2AA:Xj9SYgs++WRGVcj9uKh0rGiCuB2A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa5fd28b94ddbd0c73c4fb2eb3e179f0N.exe
Files
-
aa5fd28b94ddbd0c73c4fb2eb3e179f0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE