Behavioral task
behavioral1
Sample
0eba9a7ef2f1a05007e972786db0e40a.exe
Resource
win7-20231215-en
General
-
Target
0eba9a7ef2f1a05007e972786db0e40a
-
Size
594KB
-
MD5
0eba9a7ef2f1a05007e972786db0e40a
-
SHA1
b82139af7f71435ba0233bbe7fbb11fa570fcd89
-
SHA256
9ac4c7e4d955df644d73378aa2130c8d98ec66ecc5e14ba76b0d254b0d5d373c
-
SHA512
dcae9abb5b42dcaf26109cf3f3e943c7c0545f608811cf51b9c2d37d7653662fc9f5d996835d3218bb95efa618854f0826b3ffb385033f688b8d96701c6d13d5
-
SSDEEP
12288:joO+SDUNkQyZRd8pxiZVMx9ydRCDZq6dA3DqcJTkPqfVgbaOFoP6U6PpBlvnr+:jJ+S6cdsEjMXGRCVbdSqgTUqfEaOZhBg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eba9a7ef2f1a05007e972786db0e40a
Files
-
0eba9a7ef2f1a05007e972786db0e40a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 560KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE