Behavioral task
behavioral1
Sample
ed394c224bfff03400ee087f4abac4f0N.exe
Resource
win7-20240708-en
General
-
Target
ed394c224bfff03400ee087f4abac4f0N.exe
-
Size
446KB
-
MD5
ed394c224bfff03400ee087f4abac4f0
-
SHA1
1de633040226d2c21e977da0c3e2db88cd017c52
-
SHA256
2f654417a1245ebcf57260f5d8ae44f2bbc9a8b21b0018e5394ea50443d91e21
-
SHA512
6cfdaadfb905922f89abe864c6d83ae4b02fbb0b50004e2fe3cf8199b43ebb7dfb772881293f57b5757992f64ef87cce3aa0aa69de64f74857bd928109b3d4a5
-
SSDEEP
3072:2mVwRKCTu8ANCHu8ANCgu8ANCqu8ANC8u8ANC3u8ANCmu8ANCIu8ANCju8ANCo:2mVnhvNhvNuvNAvNivNRvN0vNWvN1vN/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed394c224bfff03400ee087f4abac4f0N.exe
Files
-
ed394c224bfff03400ee087f4abac4f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE