Static task
static1
Behavioral task
behavioral1
Sample
eb978e958437cf438144fc2f515a3bf920ae211228d0b64b31ed22a3b8301f7b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
eb978e958437cf438144fc2f515a3bf920ae211228d0b64b31ed22a3b8301f7b.exe
Resource
win10v2004-20240226-en
General
-
Target
eb978e958437cf438144fc2f515a3bf920ae211228d0b64b31ed22a3b8301f7b
-
Size
131KB
-
MD5
aee6284b8e93347deb3c504354d9984c
-
SHA1
ff1da317abf37c5d325f4cd925826a0dd1444761
-
SHA256
eb978e958437cf438144fc2f515a3bf920ae211228d0b64b31ed22a3b8301f7b
-
SHA512
6281ba83b5c6bf834b4380f4a141472ed692a3e308b1dedb8831ea74c83323c311099be0caf8d310e6f211160da88df4c6e5af879c58711537a03eba029bf2fd
-
SSDEEP
3072:hEboFVlGAvwsgbpvYfMTc72L10fPsout6nn:GBzsgbpvnTcyOPsoS6nn
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb978e958437cf438144fc2f515a3bf920ae211228d0b64b31ed22a3b8301f7b
Files
-
eb978e958437cf438144fc2f515a3bf920ae211228d0b64b31ed22a3b8301f7b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.zah Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vz6 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE