Behavioral task
behavioral1
Sample
eb9cd6c2d2987ce4ce317dd779e9517ad5aec7c4ee93df24efbbc8b851ee4447N.exe
Resource
win7-20240903-en
General
-
Target
eb9cd6c2d2987ce4ce317dd779e9517ad5aec7c4ee93df24efbbc8b851ee4447N
-
Size
9.5MB
-
MD5
e48b19d49a1a8834abae40ba382c1110
-
SHA1
2cea3f5bd3027e2fc1aa96f0ed4662cbc22b7fe4
-
SHA256
eb9cd6c2d2987ce4ce317dd779e9517ad5aec7c4ee93df24efbbc8b851ee4447
-
SHA512
3723c738ea65045aa80c6816681f254944054b3feab610690d4714f3ba4784aa9e2c35af6527b9bbc30cfc081d22c89c96fa529e0d8e72df24e945bdb060ab14
-
SSDEEP
196608:gZZr6PpsXJSe9eibZnwdHq0cyABWRQO/+QUqs2YaZ8ToHTYI/mto1K:gZB6xs5Z9epxwBa+LTK8cHB+to1K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9cd6c2d2987ce4ce317dd779e9517ad5aec7c4ee93df24efbbc8b851ee4447N
Files
-
eb9cd6c2d2987ce4ce317dd779e9517ad5aec7c4ee93df24efbbc8b851ee4447N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE