Behavioral task
behavioral1
Sample
ef891a9abbe8f20c07cb7e21ede698f7.exe
Resource
win7-20231215-en
General
-
Target
ef891a9abbe8f20c07cb7e21ede698f7
-
Size
784KB
-
MD5
ef891a9abbe8f20c07cb7e21ede698f7
-
SHA1
04bcaf2061a18c3d7df59548315d38bc2c15635a
-
SHA256
270625e3b3dd04fe8ba732679a51f70ce33657778bac4f03535bf0d5d69c58b4
-
SHA512
853afe3a3d0c08705ed14528970c6370f65d281d8178c9f13d0b25ead257c9c1aae7b13f3272fa5789cfe03f9dc94a5a3c4363cabe078bd942c1d5363dbd143a
-
SSDEEP
24576:76Pr1o8k0gzQc9tWGa7+dCLg7g/j3tTt9xAza:mDG8k0gscDqWCJj9BAz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef891a9abbe8f20c07cb7e21ede698f7
Files
-
ef891a9abbe8f20c07cb7e21ede698f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE