Behavioral task
behavioral1
Sample
aa74d8f4722cf9ea55526ec18c680106374a6c6ba94fa0ab886acb7fa2e6f909.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa74d8f4722cf9ea55526ec18c680106374a6c6ba94fa0ab886acb7fa2e6f909.exe
Resource
win10v2004-20240704-en
General
-
Target
aa74d8f4722cf9ea55526ec18c680106374a6c6ba94fa0ab886acb7fa2e6f909
-
Size
85KB
-
MD5
f2c0825d27028f6892d37f1b5695cce6
-
SHA1
ed3118d7331cf28cc733848516c460482565a937
-
SHA256
aa74d8f4722cf9ea55526ec18c680106374a6c6ba94fa0ab886acb7fa2e6f909
-
SHA512
15676df30b47e6dff9906401b80cdf80c8c6572194f236697e33b52e50e205e492778f7bd84d3780526fd6723e634522863a4028958ab7da3aa65b2e4f5da88c
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxe:fnyiQSon
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa74d8f4722cf9ea55526ec18c680106374a6c6ba94fa0ab886acb7fa2e6f909
Files
-
aa74d8f4722cf9ea55526ec18c680106374a6c6ba94fa0ab886acb7fa2e6f909.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE