Behavioral task
behavioral1
Sample
8edd968ea1f43207b32f64855f0a115d1555a7a0194896b4cca7876216db0b79.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8edd968ea1f43207b32f64855f0a115d1555a7a0194896b4cca7876216db0b79.exe
Resource
win10v2004-20240802-en
General
-
Target
8edd968ea1f43207b32f64855f0a115d1555a7a0194896b4cca7876216db0b79
-
Size
1.5MB
-
MD5
fe96613ecfcf796e9b9c6bbe46f515c9
-
SHA1
2fb271e984d0c33e6b06f32a19b2da8c329f78c7
-
SHA256
8edd968ea1f43207b32f64855f0a115d1555a7a0194896b4cca7876216db0b79
-
SHA512
3369a8211c8151f173c80defee8410b5be3fc38ca23cba1290dd2b9405c5a91e9cd0831540a1baef69c5f468cf5d98e4340bf890abc798e7a07ad284fd91d320
-
SSDEEP
24576:6zwArLT5Nyxkqwo/PldaEQWKzboAGMEb7pGgsZNlbnT4AdilXKPnAn+sCTyIVcBw:6P1gx/woeEQNoAGb/ZsZzbipKohCN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8edd968ea1f43207b32f64855f0a115d1555a7a0194896b4cca7876216db0b79
Files
-
8edd968ea1f43207b32f64855f0a115d1555a7a0194896b4cca7876216db0b79.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE