Behavioral task
behavioral1
Sample
ef8dc5f3c2b87187df488ba9eb135a60N.exe
Resource
win7-20240903-en
General
-
Target
ef8dc5f3c2b87187df488ba9eb135a60N.exe
-
Size
5.5MB
-
MD5
ef8dc5f3c2b87187df488ba9eb135a60
-
SHA1
01a4883d29da39f6d634d0f2b0d2b8155b7af813
-
SHA256
72c9d7e45bbca66087419d2b4b031df787ce3d796ac71ec9d4aba0e21623a430
-
SHA512
369565e837ff60e811fd64d23542d94859e4fb29f4f03b2bd8432d8f697f269bf6764bab538630e597dd2af36ddfe0b28c057ad6f65bc5be21ddf4da9d764f57
-
SSDEEP
49152:HoSrOO53RTqtikI8boQhfD6UDvxvykXk1rBsgyegFKvc4clwYbgkEaSsBObyXrqc:H7rOO53aDmSmaGEq+7P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8dc5f3c2b87187df488ba9eb135a60N.exe
Files
-
ef8dc5f3c2b87187df488ba9eb135a60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 58KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE