Behavioral task
behavioral1
Sample
efcced9e50c9d9f6af050bfbdb739330N.exe
Resource
win7-20240705-en
General
-
Target
efcced9e50c9d9f6af050bfbdb739330N
-
Size
3.0MB
-
MD5
efcced9e50c9d9f6af050bfbdb739330
-
SHA1
d12c7da4c57b56578ff7b6f576748650aaaaddfa
-
SHA256
c838c700f936dc9a439694924bdf7a1170779f866de3a9405f133b7f3b2f62d1
-
SHA512
ee918df9c0be634f2b9e7527a976f8dcfe1a5cd241556cb69b463c80201328ceb6a4a6a13fbb80303e3e36e66d10c3d32a07e81b24ea44f53d3d25e14b6f6eaf
-
SSDEEP
49152:CTr4xxUeZG2J4PcakLWqhC2TH5t8NlqMcakLSOXmqOgfBmlxqCicakLWqhC2TH5n:CTMrUeZGO4PcakKaC2TZt8NlPcakGB1f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efcced9e50c9d9f6af050bfbdb739330N
Files
-
efcced9e50c9d9f6af050bfbdb739330N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE