Behavioral task
behavioral1
Sample
0eb26d22921977629608bee9ac433cad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0eb26d22921977629608bee9ac433cad.exe
Resource
win10v2004-20231215-en
General
-
Target
0eb26d22921977629608bee9ac433cad
-
Size
150KB
-
MD5
0eb26d22921977629608bee9ac433cad
-
SHA1
f74ed86a937a657939e7a152608017a2fe051050
-
SHA256
5f98895efb9bedb170f5f6691dccab1c9d05f7512bbf7cc80b1fb3a3dcf144bf
-
SHA512
a367efd9df59f1e41dd97f2bc033ded779152443cf44334c51fb6ddde450a552c153b9c42e7c5af48aaca2a3be4621f3f744ad947269d492e42b601d39bc79c7
-
SSDEEP
3072:fHlsbeq3D1GIBnSR7oWbPfWwtPibTKbqv5w+RuIpKqcEujmEa+y4gBfjEWR:/lsbXT5SR7lDxtPibTzdK9z6E+d7R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb26d22921977629608bee9ac433cad
Files
-
0eb26d22921977629608bee9ac433cad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE