Behavioral task
behavioral1
Sample
ec97faef0ae5b8e0baae177d466d2408.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ec97faef0ae5b8e0baae177d466d2408.exe
Resource
win10v2004-20231215-en
General
-
Target
ec97faef0ae5b8e0baae177d466d2408
-
Size
133KB
-
MD5
ec97faef0ae5b8e0baae177d466d2408
-
SHA1
152c5430b2a80be5b3e7afd8ee813d0e7115fd2a
-
SHA256
78dda561efa191c5f07c588c5363b0bcfe3532cfd399da7fb4bffef2aa6d5f34
-
SHA512
f345fdbe296ac4a729925e8c40bc452e0ef3a821ff985d9e1cc34221c0f227f858add207d3e832707c57f13bf7bb37a27b34de3776dccd4dbdb20c5c803ac5b6
-
SSDEEP
3072:4EbyL8dIQggjZHnkGkDlaG1SHg4hQi0Z8/SbB0P5Q:pq8dIQHjZmafHg3i0Z8/SF0P5Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec97faef0ae5b8e0baae177d466d2408
Files
-
ec97faef0ae5b8e0baae177d466d2408.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE