Behavioral task
behavioral1
Sample
04ebb64c8d76195c71488f7d1ca5bff4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04ebb64c8d76195c71488f7d1ca5bff4.exe
Resource
win10v2004-20231215-en
General
-
Target
04ebb64c8d76195c71488f7d1ca5bff4
-
Size
158KB
-
MD5
04ebb64c8d76195c71488f7d1ca5bff4
-
SHA1
fb70b77974abf803a4e7e644a4788ec6c81e3755
-
SHA256
5e6d06deb8cdfbed126be9daf762ca71f5046ec9c3f43ec97cec046f8deedae3
-
SHA512
4c15e8e100c1accb9736266fe571a465b0901f3fea45ac4caa91366f8e31605f843ad83abc0a442b3b3df155835a998bc783b2c78f00b70ecfabd73a89f9109c
-
SSDEEP
3072:DsvTxZrOBqh2+4nbU520UvToDFAsMTun8pTDCuV7KVMZNRAijP9DBlj:D0uBw2+4bU5fwToGsM08Cu98K9D/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ebb64c8d76195c71488f7d1ca5bff4
Files
-
04ebb64c8d76195c71488f7d1ca5bff4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE