Behavioral task
behavioral1
Sample
ee4814d50e81edbb30bf1e0b9f9d6fc48350dccda5a9bc52bd54e5ac69092882.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ee4814d50e81edbb30bf1e0b9f9d6fc48350dccda5a9bc52bd54e5ac69092882.exe
Resource
win10v2004-20230915-en
General
-
Target
ee4814d50e81edbb30bf1e0b9f9d6fc48350dccda5a9bc52bd54e5ac69092882
-
Size
3.9MB
-
MD5
f241659259f0dc648bc83751728dfab2
-
SHA1
834528a678d6ca8026bd792856ccbb40f6284845
-
SHA256
ee4814d50e81edbb30bf1e0b9f9d6fc48350dccda5a9bc52bd54e5ac69092882
-
SHA512
f153c3474ae6c9fdaf495ce31a143bbf48d5952f4bf19bdc0c671b8de65928d50884187958181dc3155f5b7c7cd4b4c2fa94a6040913d8bad97408be9c18559a
-
SSDEEP
98304:fdh9TZp7EzyEfEchARnifHRo0wcg56BhNKP:fdh9TZp7EPMc+RmR4A7Ns
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee4814d50e81edbb30bf1e0b9f9d6fc48350dccda5a9bc52bd54e5ac69092882
Files
-
ee4814d50e81edbb30bf1e0b9f9d6fc48350dccda5a9bc52bd54e5ac69092882.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 12.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE