Behavioral task
behavioral1
Sample
fe2d7ff23cc67a398437b69ab6ed7c10N.exe
Resource
win7-20240903-en
General
-
Target
fe2d7ff23cc67a398437b69ab6ed7c10N.exe
-
Size
455KB
-
MD5
fe2d7ff23cc67a398437b69ab6ed7c10
-
SHA1
ee67c764a4555972ae3d101a422273bf208a02b8
-
SHA256
d27c6df9d355c44438d1cded50e5edf20b523b9cfd4980a1af131e19c9bce550
-
SHA512
8146639c1661cd7d8e6b553677afd2cfb6f7d43ca05e8b3b3749b1ad054215488b6b1878a77a6a20d156c1b33561c64194bc9c3f684ac1c27d6d6f3b069db465
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNWn:x4wFHoS3eFaKHpv/VycgE81lgWn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe2d7ff23cc67a398437b69ab6ed7c10N.exe
Files
-
fe2d7ff23cc67a398437b69ab6ed7c10N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE