Behavioral task
behavioral1
Sample
7ebbb4fb8b392afca86ebe151973159be058b060fd107421ff2d79b3fbf473c3.exe
Resource
win7-20240708-en
General
-
Target
7ebbb4fb8b392afca86ebe151973159be058b060fd107421ff2d79b3fbf473c3
-
Size
42KB
-
MD5
8eb5edb9b722c9966a3ce12bb781438e
-
SHA1
f0cdbae25ea8bf601caa210d8589997ef992cb9c
-
SHA256
7ebbb4fb8b392afca86ebe151973159be058b060fd107421ff2d79b3fbf473c3
-
SHA512
cb5be8604a177fb9b153fcbf8b1576ec1f3288a0ef8f1f8f5d548b88fc1f4b1a58ade169e48fc7fc06319880290b9d7ecaae55aeb4f0100dd3cd988d7c60ddc6
-
SSDEEP
768:PpO4Xb2E6NOSjkU6LN5ABhGUVTnbcuyD7UN:hOqbZ6Njkb8Ggnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ebbb4fb8b392afca86ebe151973159be058b060fd107421ff2d79b3fbf473c3
Files
-
7ebbb4fb8b392afca86ebe151973159be058b060fd107421ff2d79b3fbf473c3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE