Behavioral task
behavioral1
Sample
aedcee7cec12ab616d26f310626fadfa811079c64c89dafe459ba8ac84eca5af.exe
Resource
win7-20241010-en
General
-
Target
aedcee7cec12ab616d26f310626fadfa811079c64c89dafe459ba8ac84eca5af
-
Size
41KB
-
MD5
82e074bf86f869c71af4e49626141473
-
SHA1
9108f470cde0faba40185417da7393d7da107d11
-
SHA256
aedcee7cec12ab616d26f310626fadfa811079c64c89dafe459ba8ac84eca5af
-
SHA512
a1218c87d764c28d62f3f1c9806610b79d31c84ea93eaf9f308612a05a44b9ec62f7c88b4ad8d5b068eeae5e785313d37c0bbc44d7d9c122abffaf3decc4b01b
-
SSDEEP
768:9zpVJi5kPTIukEYpcHOZ6rFSBZxkXNVkSXtfgn3JkcBwQoabJF7nbcuyD7UX:N/JKiMLE9bOq5fgn6Ozoaz7nouy8X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aedcee7cec12ab616d26f310626fadfa811079c64c89dafe459ba8ac84eca5af
Files
-
aedcee7cec12ab616d26f310626fadfa811079c64c89dafe459ba8ac84eca5af.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE