Behavioral task
behavioral1
Sample
ed73b74f0dd5feb5c17edf52acabdbbce6225a95443eef9da88770cdda887016.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed73b74f0dd5feb5c17edf52acabdbbce6225a95443eef9da88770cdda887016.exe
Resource
win10v2004-20240508-en
General
-
Target
ed73b74f0dd5feb5c17edf52acabdbbce6225a95443eef9da88770cdda887016
-
Size
4.5MB
-
MD5
f70054fc441f5dc4ecd7313fac8f544b
-
SHA1
3931fe8250c0b342ef600be6ca20179176379fc6
-
SHA256
ed73b74f0dd5feb5c17edf52acabdbbce6225a95443eef9da88770cdda887016
-
SHA512
8f3bc614dbe9b34b1102adb8518667d3112031f3f472cf93a8eeb87c87725d893b245112dab06eac660b8d0c6a51467c24efffee2c172c9a1636062319ce4488
-
SSDEEP
49152:eLjyi40jbeN/BUM+66Q12BJWFh1d3p0p/3R+RpVVn1EfyedbIVBFNTOcglz0Ch93:6dHeNSc12B+x3p0p/3R+RbHJBLyruc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed73b74f0dd5feb5c17edf52acabdbbce6225a95443eef9da88770cdda887016
Files
-
ed73b74f0dd5feb5c17edf52acabdbbce6225a95443eef9da88770cdda887016.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 427KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE