Behavioral task
behavioral1
Sample
aa182f6a80198a58959597c1ac74298cdb335480ba86848925c87a4acf08f653N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aa182f6a80198a58959597c1ac74298cdb335480ba86848925c87a4acf08f653N.exe
Resource
win10v2004-20240802-en
General
-
Target
aa182f6a80198a58959597c1ac74298cdb335480ba86848925c87a4acf08f653N.exe
-
Size
29KB
-
MD5
acfbecc6a1e521989518b22406bf8170
-
SHA1
ba1e65c3f8c7ce94cfbaf7e84fbc4be98cfdb5dd
-
SHA256
aa182f6a80198a58959597c1ac74298cdb335480ba86848925c87a4acf08f653
-
SHA512
4dc544f73b231b0dd1608c8b6cf14da2df56369de6454dd4df3c2803ba904f2d5bb9c5729356b1f97f1877f1a7634d7ce37e4bcba65240f24a89954dcb96e437
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/S:AEwVs+0jNDY1qi/qK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa182f6a80198a58959597c1ac74298cdb335480ba86848925c87a4acf08f653N.exe
Files
-
aa182f6a80198a58959597c1ac74298cdb335480ba86848925c87a4acf08f653N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE