Behavioral task
behavioral1
Sample
eca7c9e7a8d1692d88536c78c27a9a7ef29fed54120b3b506acad05a7726da16N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eca7c9e7a8d1692d88536c78c27a9a7ef29fed54120b3b506acad05a7726da16N.exe
Resource
win10v2004-20240910-en
General
-
Target
eca7c9e7a8d1692d88536c78c27a9a7ef29fed54120b3b506acad05a7726da16N
-
Size
79KB
-
MD5
400833ef1f7f1e92a2a18ee1673ae0e0
-
SHA1
b262c1cae74ad368a6369101df0b82338a737e74
-
SHA256
eca7c9e7a8d1692d88536c78c27a9a7ef29fed54120b3b506acad05a7726da16
-
SHA512
1c24910441a51b73ef61c78ee93faddf3295b2cfd3c42ab17a6d4d2b8b8192ff12ccb8b4494bd385c0607ea3440f8c72c39d12140b4e352e12bfb146f987ad00
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rY:V7Zf/FAxTWtnMdyGdy4AnAJYq8YqiX/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eca7c9e7a8d1692d88536c78c27a9a7ef29fed54120b3b506acad05a7726da16N
Files
-
eca7c9e7a8d1692d88536c78c27a9a7ef29fed54120b3b506acad05a7726da16N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE