Behavioral task
behavioral1
Sample
1ebf74d8d537e3862499ac133ccf8114.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ebf74d8d537e3862499ac133ccf8114.exe
Resource
win10v2004-20231215-en
General
-
Target
1ebf74d8d537e3862499ac133ccf8114
-
Size
133KB
-
MD5
1ebf74d8d537e3862499ac133ccf8114
-
SHA1
101aae8a39c0b881cb98263491dcc9dd2564ff80
-
SHA256
4c37574bfac79874ef5455651473b1da2a5498fff299f6e8f8a2301b6ac3ada1
-
SHA512
f38fb182ffc2a2cf8a195ad8db5a28c5e19f06d2410de1c251fd591421354ebdc8e369a226b5f77f716a1646dbd58d447e62afd8867b703c51a90e0da27777a5
-
SSDEEP
3072:g7EfaFpyX10cOcm7n5+3uTVQ71li3bS5ycSqn/6x9Q:gOl0cOc6+eBQ7i3+ycSn7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ebf74d8d537e3862499ac133ccf8114
Files
-
1ebf74d8d537e3862499ac133ccf8114.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE