Behavioral task
behavioral1
Sample
c7ed4b2c61a3a64b6306aea88881eac0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c7ed4b2c61a3a64b6306aea88881eac0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c7ed4b2c61a3a64b6306aea88881eac0N
-
Size
5.8MB
-
MD5
c7ed4b2c61a3a64b6306aea88881eac0
-
SHA1
c2d0d869998378ab27f1d8d800713d9138228fb4
-
SHA256
0bda10a5297e2cfac4c46951f44e0b3c405e6b254bb70877d567bada8a5cc975
-
SHA512
d3991a8f49d3dab6cf2073f3cb70f56b6236ed009d92c4785d33045eb5c7369408fa891c8d79fa4c3e39302e8cca4d675518992271b6c361f59c057876689c7d
-
SSDEEP
98304:lQZ6+CqIdpX0YDJ68OSX25JULtDR0xb/f5eVZHBoKLtwpdIi+UVBcVDAOV/T:uA+zIT0o68j/tYiLypV+CcVL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ed4b2c61a3a64b6306aea88881eac0N
Files
-
c7ed4b2c61a3a64b6306aea88881eac0N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE