Behavioral task
behavioral1
Sample
ed2b6497bdf10e55770cb607c5984a64.exe
Resource
win7-20231215-en
General
-
Target
ed2b6497bdf10e55770cb607c5984a64
-
Size
275KB
-
MD5
ed2b6497bdf10e55770cb607c5984a64
-
SHA1
ebbd039a5c74c8b22acceb62774310bc8768cd64
-
SHA256
7ad73a49f037fc64ce4c9691e84048e26eafbc6f039da031a33636851644211f
-
SHA512
c4efec35644c9691088ba6dd73ed6f45124d5f77b8d1caffa381c727d3719b92246a9ba3b89f7234936db0fd59d7e3f4ef6dfbdba5e939679406cb3aff84e916
-
SSDEEP
6144:tRh/WhbQtlu1ncCNnM2aodWYcXWBuJM6qxcjZJZZxAirPMAoSG:tRh/WhbgluuCZMHoAxXWBu8MT3oSG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed2b6497bdf10e55770cb607c5984a64
Files
-
ed2b6497bdf10e55770cb607c5984a64.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE