Behavioral task
behavioral1
Sample
7ecda819aa0dcfc1cb316bfd5ea5a566.exe
Resource
win7-20231215-en
General
-
Target
7ecda819aa0dcfc1cb316bfd5ea5a566
-
Size
369KB
-
MD5
7ecda819aa0dcfc1cb316bfd5ea5a566
-
SHA1
ec8a78ab928ebeccb95b602b36f2581a4283426f
-
SHA256
e8b6283d59bf326b11c8856a198eccb677e2acc372de32ad325d82085445beae
-
SHA512
b3bce9f05f684bc743ce0b21fbada1ad89f6e9aa6544283cee734c07436cee5cdfe33773ffd84c6d49ae21cd08b8ed9698d2801c0dae204b1462fa3aee4b753c
-
SSDEEP
6144:Dcwn+UjKv3Gc8RRB9EIdlMwpQiyTZ9mkYFG/i3hLhA54rp/uSR:Dcq+UWfVYRB9pbMwqNTEcGZyI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ecda819aa0dcfc1cb316bfd5ea5a566
Files
-
7ecda819aa0dcfc1cb316bfd5ea5a566.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE