Behavioral task
behavioral1
Sample
ed9bfaf259edccf72ee48fd1de709abd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ed9bfaf259edccf72ee48fd1de709abd.exe
Resource
win10v2004-20231215-en
General
-
Target
ed9bfaf259edccf72ee48fd1de709abd
-
Size
3.9MB
-
MD5
ed9bfaf259edccf72ee48fd1de709abd
-
SHA1
e80c260f3330a93b663bc70adead693b86ce1de6
-
SHA256
88994f48875ed6ca084a4b456d0fbec08bfc7151c5051024560c453e0afa01ac
-
SHA512
68f69ee3c57581920b438a0324745631fece5b7bea222589eaecae8003730b6b8abb3cde0a79afcf0878d98f23fa2e37439c2d036b5ddce11cd85dae4cc713eb
-
SSDEEP
98304:LN8l8fY2A9zyULG+c+/QHqwLnyNA9zyULG+9GyyuA9zyULG+c+/QHqwLnyNA9zya:h8l7zLqh+/gFnzLqo4zLqh+/gFnzLq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed9bfaf259edccf72ee48fd1de709abd
Files
-
ed9bfaf259edccf72ee48fd1de709abd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE