Behavioral task
behavioral1
Sample
1eb5ec3a85add18cc901ed13bebd2817aeb6ae3a6b215007cf4e51ddba0826dd.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1eb5ec3a85add18cc901ed13bebd2817aeb6ae3a6b215007cf4e51ddba0826dd.exe
Resource
win10v2004-20240508-en
General
-
Target
1eb5ec3a85add18cc901ed13bebd2817aeb6ae3a6b215007cf4e51ddba0826dd.exe
-
Size
52KB
-
MD5
65b5d15def1fb682a7200f2e634951c0
-
SHA1
f22806570cd94373c6636b44e15949b7832c91a7
-
SHA256
1eb5ec3a85add18cc901ed13bebd2817aeb6ae3a6b215007cf4e51ddba0826dd
-
SHA512
788afc035ea9fecb6f0eb3ecf2ae7ad30f419b7bc384aa4f6802951b7f5f47dc2ab4ff8464ba5b2fc40b0cca295638a0f62f74dc9780208164e6b584bc673704
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WGoj9COieQJfoj9COieQJ0Z2jQn:V7Zf/FAxTWoJJ2WjWpf1fX2+ccl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eb5ec3a85add18cc901ed13bebd2817aeb6ae3a6b215007cf4e51ddba0826dd.exe
Files
-
1eb5ec3a85add18cc901ed13bebd2817aeb6ae3a6b215007cf4e51ddba0826dd.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE