Behavioral task
behavioral1
Sample
aa847a50a3809982183626f525be72d0N.exe
Resource
win7-20240708-en
General
-
Target
aa847a50a3809982183626f525be72d0N.exe
-
Size
96KB
-
MD5
aa847a50a3809982183626f525be72d0
-
SHA1
e4e193a5510b31c62ac14a8d04d58a2ef3ff3472
-
SHA256
f289c538499a5c119b3598b5615856ff14245954d0362af2a4655c336d96dd0e
-
SHA512
9d4871522d7c2c7a14ddbbcc2e31f17bdd178c2ad05b5502b015dd95bf9a84c3b09c30589cd068492ebba26cb2a4d9235a164894026fe38d9ac609a5fe2c9de2
-
SSDEEP
3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzg3:8cm4FmowdHoSgWrXUg3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa847a50a3809982183626f525be72d0N.exe
Files
-
aa847a50a3809982183626f525be72d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE