Behavioral task
behavioral1
Sample
ed46b7be45bbcc38d281b1edf23c7b8561d51f4e70163a96a9d2f0e6a69304f6N.exe
Resource
win7-20240903-en
General
-
Target
ed46b7be45bbcc38d281b1edf23c7b8561d51f4e70163a96a9d2f0e6a69304f6N
-
Size
85KB
-
MD5
895b334a60f55301b63a27ee94e3a930
-
SHA1
3be198b39bdd740e9c57620315fbf0e3e2f3645c
-
SHA256
ed46b7be45bbcc38d281b1edf23c7b8561d51f4e70163a96a9d2f0e6a69304f6
-
SHA512
fe8f5f6b03716163cf4d6816e0a492a0fd0254e1a36f5d129f1c0645d48660d77561399981a4bbcbdc5e92c2448189430670331dd511ebb7c054938d30edd9d5
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmqh:8vm1AeT7BVwxfvLFwjRqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed46b7be45bbcc38d281b1edf23c7b8561d51f4e70163a96a9d2f0e6a69304f6N
Files
-
ed46b7be45bbcc38d281b1edf23c7b8561d51f4e70163a96a9d2f0e6a69304f6N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE