Behavioral task
behavioral1
Sample
ebf3ca90db1fb28c00da705c3866f101c6927387b060b533bc2d79f2f74e043c.exe
Resource
win7-20240705-en
General
-
Target
ebf3ca90db1fb28c00da705c3866f101c6927387b060b533bc2d79f2f74e043c
-
Size
75KB
-
MD5
bff375688d6a2ea55bcbe8da70524289
-
SHA1
98628d44b6c400b937659ed0f736320b8c66f4e6
-
SHA256
ebf3ca90db1fb28c00da705c3866f101c6927387b060b533bc2d79f2f74e043c
-
SHA512
1fdb3846a0571b7df36023fd226cbf0bca3fe9e54a2842e92bddf3d8956a9df78ea4da09e99862a118642d7974c820256a4ace0448fbe113b80d7147afd3e0bf
-
SSDEEP
1536:8AAbhIP83LNnouy88zJHNWnnn3CCCCrrDRNxUUUmBixxx1YYYx:87hEUL1out8zdID1X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebf3ca90db1fb28c00da705c3866f101c6927387b060b533bc2d79f2f74e043c
Files
-
ebf3ca90db1fb28c00da705c3866f101c6927387b060b533bc2d79f2f74e043c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE