Behavioral task
behavioral1
Sample
ecd316fb268bf778395a3a24d18ea615.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ecd316fb268bf778395a3a24d18ea615.exe
Resource
win10v2004-20231215-en
General
-
Target
ecd316fb268bf778395a3a24d18ea615
-
Size
1.6MB
-
MD5
ecd316fb268bf778395a3a24d18ea615
-
SHA1
8ae7be27d03914648e55f344264a485fcd29d07a
-
SHA256
7fe618502340e2a0f0853f7b92d8d5729a0c9adbfd9d6295663136a3c6b9bc3b
-
SHA512
ecffb505327116cbd4cab03a22a0a310178b1cde88a90d85d597c2727e7842c946adde6ae87e3257f30142875fc5304f9058299f87ed1947043c5fc1802faec0
-
SSDEEP
49152:3D1FBT+wJzd9pC1cakLz0HBDpjg8632wPcakLz0O:3jBSwJzd9pC1cakchS87ccakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecd316fb268bf778395a3a24d18ea615
Files
-
ecd316fb268bf778395a3a24d18ea615.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE