Behavioral task
behavioral1
Sample
ed492f9af7ad20aabded18e01ca5ad83fa445d396cf746819a61439fc8eb87eaN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ed492f9af7ad20aabded18e01ca5ad83fa445d396cf746819a61439fc8eb87eaN.exe
Resource
win10v2004-20241007-en
General
-
Target
ed492f9af7ad20aabded18e01ca5ad83fa445d396cf746819a61439fc8eb87eaN
-
Size
776KB
-
MD5
1e1966b0feefdebafd0244777b8c9c30
-
SHA1
32a0810860307459af0c6d65f043f9c59b21c277
-
SHA256
ed492f9af7ad20aabded18e01ca5ad83fa445d396cf746819a61439fc8eb87ea
-
SHA512
20cf72c6966f8806c64638d89f6ba11683d344ddc0debcd81adbe87daede14552b74c4ef741e34b514bad5548c7c96c6b5b7e00c5279e8eeb8d7785880cd6d88
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7cHANUTNhGonSks2:jt0VPFfsKAkrbPl7cHANUTNhGUs2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed492f9af7ad20aabded18e01ca5ad83fa445d396cf746819a61439fc8eb87eaN
Files
-
ed492f9af7ad20aabded18e01ca5ad83fa445d396cf746819a61439fc8eb87eaN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE