Behavioral task
behavioral1
Sample
easy_Malicious_2cdc9f1ef404a41aef617215c4f600e29f8e5c8a38576a5c9544fc0e1bf4a071.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
easy_Malicious_2cdc9f1ef404a41aef617215c4f600e29f8e5c8a38576a5c9544fc0e1bf4a071.exe
Resource
win10v2004-20230703-en
General
-
Target
easy_Malicious_2cdc9f1ef404a41aef617215c4f600e29f8e5c8a38576a5c9544fc0e1bf4a071.exe
-
Size
240KB
-
MD5
4206536d55f25e2ee322801bbb950b70
-
SHA1
2e4b08493ad7f995c24509a0ba7790506a6b725f
-
SHA256
c3b2722abf37e151b9f75e71a86918b451b81c281beccbdd5313710b224d9f9b
-
SHA512
754bfb4ce2fbd86d524ec7011b4832bf6f3b662dbcb931c1a83507946302df6ab7e1ae86dd58066a11f0317cf381f774bd8d055260d6a891122a102152904069
-
SSDEEP
6144:uuq1yy/pjnkeatS+TC1+Jof+piHVA+f+pBpJlSj:y1yc9ktbTC82f4i1AbpXSj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource easy_Malicious_2cdc9f1ef404a41aef617215c4f600e29f8e5c8a38576a5c9544fc0e1bf4a071.exe
Files
-
easy_Malicious_2cdc9f1ef404a41aef617215c4f600e29f8e5c8a38576a5c9544fc0e1bf4a071.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 53KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE