Behavioral task
behavioral1
Sample
2485ebbfeefdf2c67c7e4ed3a18ffbad0d760618204beedacc973575d06981a9.exe
Resource
win7-20240729-en
General
-
Target
2485ebbfeefdf2c67c7e4ed3a18ffbad0d760618204beedacc973575d06981a9
-
Size
11.8MB
-
MD5
1f894cbb24cd1cf425fe9beeb743b9af
-
SHA1
bb02b7e2c24c01c6cbb8cf6b4ee6548e5222fba5
-
SHA256
2485ebbfeefdf2c67c7e4ed3a18ffbad0d760618204beedacc973575d06981a9
-
SHA512
a7b173e033ce10c76a3166b238e0ae20376cae916b58bc692e958a1c75633a37bd414664e62d2a161048dae89ef1a1aadcf66d3664ee7d6922ef90c212453af7
-
SSDEEP
196608:7SvYm1cCG7F5BZvJo8N4pPtaZuvz1pHMpOSPVJlwmVp69u2nHeWQME5n:+vv11GBZvJVN4pP0ZkmpNBLVp2LQME5n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2485ebbfeefdf2c67c7e4ed3a18ffbad0d760618204beedacc973575d06981a9
Files
-
2485ebbfeefdf2c67c7e4ed3a18ffbad0d760618204beedacc973575d06981a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE