Behavioral task
behavioral1
Sample
eb774cb59ea0d2394faf84669dd2e04a3dbf1cb458659adb3098c3faeff3cea5.exe
Resource
win7-20240903-en
General
-
Target
eb774cb59ea0d2394faf84669dd2e04a3dbf1cb458659adb3098c3faeff3cea5
-
Size
4.5MB
-
MD5
a473c0d4a51995f641e956b107ccf3eb
-
SHA1
4ff7e7f7a714807a703fa9180c962da7d5e63d32
-
SHA256
eb774cb59ea0d2394faf84669dd2e04a3dbf1cb458659adb3098c3faeff3cea5
-
SHA512
f15829dacc77a074d3d98938e8b30da8dda65b17d2eca0e2464acb83ca2ead4f993a8e36be6bbb7271459bae6e0e874d477a931530fcdf9fdeb5270381b152b0
-
SSDEEP
98304:b+uhMz1+Gcs4Enr6pnKm3NeKV1UW7xmLuofTzIZcWH6:iuKZtcsvnr6pK0j7xma2zIZHH6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb774cb59ea0d2394faf84669dd2e04a3dbf1cb458659adb3098c3faeff3cea5
Files
-
eb774cb59ea0d2394faf84669dd2e04a3dbf1cb458659adb3098c3faeff3cea5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE