Behavioral task
behavioral1
Sample
feedf1ac5ae8e9011eabc3ac6df53d70N.exe
Resource
win7-20240705-en
General
-
Target
feedf1ac5ae8e9011eabc3ac6df53d70N.exe
-
Size
227KB
-
MD5
feedf1ac5ae8e9011eabc3ac6df53d70
-
SHA1
26c37f4872c2533d676fbec17d690cff69989f86
-
SHA256
8da202fadcbaf88913d5d1f8b0132009a45a0574efb584762200c08ce1cbd78f
-
SHA512
7044e2f9dc3677c0a7b30e3528736ad50e93ac20c587a19020849f33418a1e10f74ec87a71dbafa3fff4fa97ab87fc293b30f53422deab7ca857d0a2604f968a
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtG:jvw68XS8+d8HamysaZHRD44M3ZzF/Gek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feedf1ac5ae8e9011eabc3ac6df53d70N.exe
Files
-
feedf1ac5ae8e9011eabc3ac6df53d70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ