Behavioral task
behavioral1
Sample
ea7bada57e2bd8aaeb37360a9ba3b910N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ea7bada57e2bd8aaeb37360a9ba3b910N.exe
Resource
win10v2004-20240709-en
General
-
Target
ea7bada57e2bd8aaeb37360a9ba3b910N.exe
-
Size
96KB
-
MD5
ea7bada57e2bd8aaeb37360a9ba3b910
-
SHA1
9b105ae8dcdc631c459820dc3bf124c29fad1e30
-
SHA256
a33374aa8f18747b9ae7c79b7f7a7f4cfae302e22b4f5abff11ec101f26ff6c0
-
SHA512
42ecd3029eaf354285d83f62696532e4f425b32f7550205775b1e31e49a4c7855fa3c55209d7d8c1900576e5d178beb5a372c497bfdc3c8941b1a11afad02100
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8OySUX2R2W45PL:fnyiQSonySUX2R2r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea7bada57e2bd8aaeb37360a9ba3b910N.exe
Files
-
ea7bada57e2bd8aaeb37360a9ba3b910N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE