Behavioral task
behavioral1
Sample
ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab.exe
Resource
win7-20240221-en
General
-
Target
ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab
-
Size
570KB
-
MD5
c08aa458038e4d9a46af3573265d03c6
-
SHA1
fae30ccd9f1a2b230e26cdc5ee75656db3ecf069
-
SHA256
ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab
-
SHA512
266176c22beae3c874bcf1bc93a1538ee7f34781869dbbf4845e43759d720b218a6fceb32f292edade227da9438d674ef360807beed5e108f34c1147211de8ad
-
SSDEEP
12288:G7zerkKbDkVraNncPQFABDCc+LGZ2FzXJ0w7swXI1zjjgPUYSGoS:serkJVraHFABDGCkFV4w+UUYS
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab
Files
-
ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 980KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE