Behavioral task
behavioral1
Sample
8edf1faccb531db93e6dd91504788ba05468844b540a0e10acc25480b39f3c80.exe
Resource
win7-20231129-en
General
-
Target
8edf1faccb531db93e6dd91504788ba05468844b540a0e10acc25480b39f3c80
-
Size
12.9MB
-
MD5
e7c3ec75f2a198dbcb117e069a48107a
-
SHA1
9b89bf570ebfbd647e03cfe2cc8fe9d5cb804da8
-
SHA256
8edf1faccb531db93e6dd91504788ba05468844b540a0e10acc25480b39f3c80
-
SHA512
d8be8d2314c251a692a1ef44c60ece852e74d51ea42a188e7d828deafd7ea1c19d67d15f59be6d8c94c150e316119ff02d32918da760d6e82c272a25018511c9
-
SSDEEP
196608:/nb6AAkgLNvEqfPS4XAkXnqif8krrgcFosAEmzRUcbAHaahUgfpCn8mzVR7w7:/blzgLpfvxXd55AEc0R148EXw7
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8edf1faccb531db93e6dd91504788ba05468844b540a0e10acc25480b39f3c80
Files
-
8edf1faccb531db93e6dd91504788ba05468844b540a0e10acc25480b39f3c80.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 35.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12.8MB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE