Behavioral task
behavioral1
Sample
efacb7b188ddc6bd95fd3a16295c046abdce000eac9d37dd806a0cdcaeb87757.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
efacb7b188ddc6bd95fd3a16295c046abdce000eac9d37dd806a0cdcaeb87757.exe
Resource
win10v2004-20240419-en
General
-
Target
efacb7b188ddc6bd95fd3a16295c046abdce000eac9d37dd806a0cdcaeb87757
-
Size
2.5MB
-
MD5
b8f0f539cb6cb4f5d1c3ce5613eb8aa5
-
SHA1
6d2eb0aa4d145a874bde7fdbe8e489564edc8d6e
-
SHA256
efacb7b188ddc6bd95fd3a16295c046abdce000eac9d37dd806a0cdcaeb87757
-
SHA512
f4d04b622a25a9c993fac32fcd3a4d47cca4e93b94f39c5eb571c2484c9dd418eaebe7b00ff283a5da5075c906ca431888e9ed92788559c1a58a930509659c63
-
SSDEEP
49152:9dVWhJZWyLcU24w9HIAYyqCzzOw3oUTHUmCrojuNZxbkgk/P3x:9dVWhyy/d+HRzZLsbzkLX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efacb7b188ddc6bd95fd3a16295c046abdce000eac9d37dd806a0cdcaeb87757
Files
-
efacb7b188ddc6bd95fd3a16295c046abdce000eac9d37dd806a0cdcaeb87757.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE