Behavioral task
behavioral1
Sample
eb3e01a5f4dfc1ce41a77dcf8a85a660N.exe
Resource
win7-20240708-en
General
-
Target
eb3e01a5f4dfc1ce41a77dcf8a85a660N.exe
-
Size
130KB
-
MD5
eb3e01a5f4dfc1ce41a77dcf8a85a660
-
SHA1
dd2b3906114a0d416c5d97de2ac6c55c4dfd7685
-
SHA256
edd3f99f27d8c97cf1c74072fd6fc13643076782f8d8035ca2084827c1fe2129
-
SHA512
e3e11838e7006ed8be7b33487981d0932cb00a8edcde3ac2801cbca7ad8506d8cea0f79ac99b820a13cc0f8f1d40e7d0d99b05276e9b773ba4dc27c2c4d52377
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyoKIK21LTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxak:fny1tE5KIK21L6W2QZwKS7k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb3e01a5f4dfc1ce41a77dcf8a85a660N.exe
Files
-
eb3e01a5f4dfc1ce41a77dcf8a85a660N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE