Behavioral task
behavioral1
Sample
ee267f7474b1a95a14cf9b3ac08e9a78.exe
Resource
win7-20231129-en
General
-
Target
ee267f7474b1a95a14cf9b3ac08e9a78
-
Size
784KB
-
MD5
ee267f7474b1a95a14cf9b3ac08e9a78
-
SHA1
d25952f5810d9fb2a4e7cd862a18597f706fe01f
-
SHA256
87cbec92a4495d862a8b0de0e4b5ef7e1c2773f5697ed2ea792d332a3c2cb56c
-
SHA512
e473472c1f2f331917eb9123a902382bcbf3991babb67c09d478490f878434f4c0ea68fda2901c45375cb9b26fd1a11392329625c6ecf9b0b8b1499ecaa193ba
-
SSDEEP
12288:SW14+byCdICEOgmdTcKofVwsWZCpM+fI2a6NUx9YSnrkZBVO34f/Rp8/JR:S7XcBnKHW1mNUxSSr8O34f/RC/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee267f7474b1a95a14cf9b3ac08e9a78
Files
-
ee267f7474b1a95a14cf9b3ac08e9a78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE