General
-
Target
EasyRoboCopy v1.0.16 Setup.exe
-
Size
226KB
-
MD5
940b372b12ca77d134695bd96fecca3e
-
SHA1
e71423ff76799850d843214a7923401e7d0d1b9f
-
SHA256
d1cfc69cbeedec31facecbfe0511fa00f40257d5b8f6260a60b875903851b077
-
SHA512
46c31e20d3ea9bcdc48c87538ec5767cb5867b4805511b168862e52267b4b1f12632751d7c2bd56c5fe07904652f4f92a6441bc45508c6ba22ec00199060ce84
-
SSDEEP
6144:u7Lq0lZ6EVuCiiOhHMkuoSWFo/sVyfEmR9Ob8Q4z4mQAypN:u7G8hECi5huoSUVyzRUb8zl4pN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EasyRoboCopy v1.0.16 Setup.exe
Files
-
EasyRoboCopy v1.0.16 Setup.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE