Behavioral task
behavioral1
Sample
ed2b770fd96033c5a79cf437507dcd5d738e3e3ea69b36e1deb15a07cea9afca.exe
Resource
win7-20240903-en
General
-
Target
ed2b770fd96033c5a79cf437507dcd5d738e3e3ea69b36e1deb15a07cea9afca
-
Size
8.2MB
-
MD5
2f4058542b80bc2af618c3a801373359
-
SHA1
5859e6022c4388cf511e91eb0ea495e135629c3d
-
SHA256
ed2b770fd96033c5a79cf437507dcd5d738e3e3ea69b36e1deb15a07cea9afca
-
SHA512
c0bdf3704180c7960f6aa69349a59dab8b40a47c8f322a2ec8c811c658d44601f8dee3fd94371dd8e7e687fcc6b3aa5bae89e6c30213ee97c263d29183c9c311
-
SSDEEP
196608:iuKZtcsvnr6pK0j7xma2zIZHHJp+jVqHwHiBjooyEFgB:Etcs07xvL+jVq/ioJFc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed2b770fd96033c5a79cf437507dcd5d738e3e3ea69b36e1deb15a07cea9afca
Files
-
ed2b770fd96033c5a79cf437507dcd5d738e3e3ea69b36e1deb15a07cea9afca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE