Behavioral task
behavioral1
Sample
ecbbf3ed27213d046012d96514de6190N.exe
Resource
win7-20240708-en
General
-
Target
ecbbf3ed27213d046012d96514de6190N.exe
-
Size
286KB
-
MD5
ecbbf3ed27213d046012d96514de6190
-
SHA1
d521dc784d2d359b224f9cbdf07f9a38e0cc0b5b
-
SHA256
7674c4272399978218fc4756ac030477a30b999bf4ae82c1e7c88fcc2435b1a6
-
SHA512
5d58a7e681ab0084bbdb8c358c1213f55c05eb26257c72e331bcc462b8e09061e4e2540fe3091e93fee1d09804ba5d3ffe43185af6ef34880a428459b7744999
-
SSDEEP
1536:mseT7BVwxfvEFwjRFBrCnBrCABrCuolrCcBrCuKBrCcBrCuKBrC6eT7BVwxfvEFi:msmVwRKCWs7oXCXC6mVwRKQmVwRKYJp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecbbf3ed27213d046012d96514de6190N.exe
Files
-
ecbbf3ed27213d046012d96514de6190N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vGcDmgqS Size: 3KB - Virtual size: 2KB
OemrSHrg Size: 93KB - Virtual size: 93KB
oTYNbdoC Size: 73KB - Virtual size: 72KB
xtdCtgCM Size: 7KB - Virtual size: 6KB
WBqRVNOm Size: 2KB - Virtual size: 1KB
crmSjrOd Size: 512B - Virtual size: 343B
TaxqqvYk Size: 12KB - Virtual size: 12KB
asknpKFN Size: 512B - Virtual size: 482B
WbQjzPCY Size: 4KB - Virtual size: 4KB
oYlVYBAV Size: 4KB - Virtual size: 4KB