Behavioral task
behavioral1
Sample
Challenge_Benign_edc8355ac5b03589d63430d2fd89c9f5a1feee0a8c6155be188a95471eafd30a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Challenge_Benign_edc8355ac5b03589d63430d2fd89c9f5a1feee0a8c6155be188a95471eafd30a.exe
Resource
win10v2004-20230703-en
General
-
Target
Challenge_Benign_edc8355ac5b03589d63430d2fd89c9f5a1feee0a8c6155be188a95471eafd30a.exe
-
Size
81KB
-
MD5
5dc589d2d2c3ad943094db269e26886a
-
SHA1
18d7c418524f9c69942cc652ac2504588e032bdf
-
SHA256
2f8e25ffb3421d9e446272b44f70894eaf41085ebae28a01214d6c365e02f215
-
SHA512
ba5606d480b0c37cc20774ab0d92fe003bdd85766fbf4d8a5f2dfeffef1a9bdc31de7390e6f9a0ae787e20c3a4e6b203f16b0d2deacc8e5372542dcd49a6be6a
-
SSDEEP
1536:k6TMqQEIkNJb1UCONT3IgBF9DzpCTsLCiiBuBTBSBfraw21CsGtIFHuQoKANg:pQFvx9HpsA2Up8IwTtIFHkKAO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Challenge_Benign_edc8355ac5b03589d63430d2fd89c9f5a1feee0a8c6155be188a95471eafd30a.exe
Files
-
Challenge_Benign_edc8355ac5b03589d63430d2fd89c9f5a1feee0a8c6155be188a95471eafd30a.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE