Behavioral task
behavioral1
Sample
Exe-Cute!.exe
Resource
win10v2004-20230703-en
General
-
Target
Exe-Cute!.exe
-
Size
7.7MB
-
MD5
26bd4a1d37b609a33401f86e7ad7a97f
-
SHA1
2de8f3513b7162dadc834699bd3ed8f771c8c5b7
-
SHA256
550865b50feb5c692cdfa5f9c722c0c14002ac9593292bf20ec5cb8e7843df8b
-
SHA512
d634ef8b87689a44e3f7da09bd60b1641f033b5ba99e8c807617155948d316e3eac9cb77d6cc29e869fd5bf65cad556e2ddabbd0e903e229dfc2dac485cb6f57
-
SSDEEP
196608:Cx7+hSUQSGBWdxT807wzPUsZ8cjyTsVTwG042KZp4yA:CxKUB+l8yw12O3dP2hp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Exe-Cute!.exe
Files
-
Exe-Cute!.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 14.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE