Behavioral task
behavioral1
Sample
8eb134b189ec866d0b25c0d1c59760af711a98e8c7449d66fa70c3e2ba397e9eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8eb134b189ec866d0b25c0d1c59760af711a98e8c7449d66fa70c3e2ba397e9eN.exe
Resource
win10v2004-20240802-en
General
-
Target
8eb134b189ec866d0b25c0d1c59760af711a98e8c7449d66fa70c3e2ba397e9eN
-
Size
135KB
-
MD5
8db5fdc6643ab36a5d3a8f3a78437f10
-
SHA1
bbe7412c6ece00f09391fd9afc89cf81def8443f
-
SHA256
8eb134b189ec866d0b25c0d1c59760af711a98e8c7449d66fa70c3e2ba397e9e
-
SHA512
f65a7454e34f65f7e64e3f84065bd6d3200ea074c202962704ec9c614d9f83b93c4b3a4c9c033eb5962e82b8e5de812c4cee44a83c73465b00f2ce98450c2427
-
SSDEEP
1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SO/:YfU/WF6QMauSuiWNi9eNOl0007NZIO/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eb134b189ec866d0b25c0d1c59760af711a98e8c7449d66fa70c3e2ba397e9eN
Files
-
8eb134b189ec866d0b25c0d1c59760af711a98e8c7449d66fa70c3e2ba397e9eN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE