Behavioral task
behavioral1
Sample
eeb085f1c23c970ffc508d24c7c01ac0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eeb085f1c23c970ffc508d24c7c01ac0N.exe
Resource
win10v2004-20240802-en
General
-
Target
eeb085f1c23c970ffc508d24c7c01ac0N.exe
-
Size
71KB
-
MD5
eeb085f1c23c970ffc508d24c7c01ac0
-
SHA1
80c7624af089d726368b76f6861a90a72eee0c5f
-
SHA256
fc33f9258d6c6d845932b9fec13640f9d6d9e229215ebdb1fa3a290017f8ecb8
-
SHA512
b1d63eeae1f0ed470ceb70fddec1782cc2350eef45acd282633f68108a4564c1f974c56fd8f0e9286cb77a668a4a885796d15ae53e3eb1bed84a4fd6efad5189
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/til5z35ztM:V7Zf/FAxTWoJJ7TTQoQlRH3c3N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeb085f1c23c970ffc508d24c7c01ac0N.exe
Files
-
eeb085f1c23c970ffc508d24c7c01ac0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE