Behavioral task
behavioral1
Sample
ed1f8af9d120deaa804f3dc7f21c5211ab2579620462dce3408f95c65daf77f6.exe
Resource
win7-20240903-en
General
-
Target
ed1f8af9d120deaa804f3dc7f21c5211ab2579620462dce3408f95c65daf77f6
-
Size
1.5MB
-
MD5
abfb95088c80c2f456956f11e8ed4ab4
-
SHA1
7f960282a90edc037fd5168ce1b85faee6ed502f
-
SHA256
ed1f8af9d120deaa804f3dc7f21c5211ab2579620462dce3408f95c65daf77f6
-
SHA512
666c08abf282c5e37e42e1f5227587e55606d77bb575e69f025662ed46a0cea7942714a58908448287657f6dddcfe8f95460b2fdb8987046854f3258ef17f6c7
-
SSDEEP
24576:u1Wi1DzlSNZ3iDZNWR3WxZChLV1JFm1o36lzAg:u1DZUv3WGH1SN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed1f8af9d120deaa804f3dc7f21c5211ab2579620462dce3408f95c65daf77f6
Files
-
ed1f8af9d120deaa804f3dc7f21c5211ab2579620462dce3408f95c65daf77f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE