Behavioral task
behavioral1
Sample
1aab7dde055f92700b030963d20f7bd0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1aab7dde055f92700b030963d20f7bd0N.exe
Resource
win10v2004-20240802-en
General
-
Target
1aab7dde055f92700b030963d20f7bd0N.exe
-
Size
213KB
-
MD5
1aab7dde055f92700b030963d20f7bd0
-
SHA1
3e5acc5773149f2eb7784471eaede4fd88656ee6
-
SHA256
a6406f04e1de07655c061e4e1649de35efe3a70d0067ff129e6dd044b8e4b679
-
SHA512
a59d4cab4fa0c93fe08007e3a8e7c8cf35f4b400231ef122c401c7c95a8ca24990a4200b95b3b83cefb81cff344cacaecf40326663ed3f1dde89d46eb018c30f
-
SSDEEP
6144:bPDLCL4Io5R4nM/48KC712X5Uk9Qgv/Eh3hV69HJb:bPKL8qEKregF0jV4J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aab7dde055f92700b030963d20f7bd0N.exe
Files
-
1aab7dde055f92700b030963d20f7bd0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB