Behavioral task
behavioral1
Sample
7ebe16848edede2e4940f9d685775f34.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ebe16848edede2e4940f9d685775f34.exe
Resource
win10v2004-20231215-en
General
-
Target
7ebe16848edede2e4940f9d685775f34
-
Size
5.8MB
-
MD5
7ebe16848edede2e4940f9d685775f34
-
SHA1
b5ab49a3365e435d3ec8cf37fc402b7636cd78aa
-
SHA256
6156eb52f00926e598f0c41efdc3ffd0dbea9ba0efa4b8f1798f98c16a946d8a
-
SHA512
60f9b36cec5229a741f3eb6af1f32f6ca938fc04e4aaca2d03c63996d8f332310c0fae321fc1cee542be961376b0d5f5e4f914aae433b60518314ad90d6d20c3
-
SSDEEP
98304:gOMbi5kGseeqLNih4HBUCczzM37ByUHQgMlii6vRK+paY4HBUCczzM3:gfi5LsedLNPWCv7HDMliZK+UHWC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ebe16848edede2e4940f9d685775f34
Files
-
7ebe16848edede2e4940f9d685775f34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE