Behavioral task
behavioral1
Sample
eeecf5b9f99fa1ef7b682d5fb934be8db3240f6aa1f776058528a3edc3c55bff.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eeecf5b9f99fa1ef7b682d5fb934be8db3240f6aa1f776058528a3edc3c55bff.exe
Resource
win10v2004-20240226-en
General
-
Target
eeecf5b9f99fa1ef7b682d5fb934be8db3240f6aa1f776058528a3edc3c55bff
-
Size
360KB
-
MD5
13595a8f16416de99a8512ae86053fca
-
SHA1
d30fe078af8050b651070ce1cbd5f61c5aa0d4e1
-
SHA256
eeecf5b9f99fa1ef7b682d5fb934be8db3240f6aa1f776058528a3edc3c55bff
-
SHA512
2dbd7888e1c0f817bc7b53f3a2cdaf5374dec94edbd6f1d80b044928b00480fc65d897fd77f940f5ae08674283365cda2ca7bee0d747c538e45d04a7122e1990
-
SSDEEP
6144:vhbZ5hMTNFf8LAurlEzAX7oAwfSZ4sXUzQIF0:ZtXMzqrllX7XwfEIW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeecf5b9f99fa1ef7b682d5fb934be8db3240f6aa1f776058528a3edc3c55bff
Files
-
eeecf5b9f99fa1ef7b682d5fb934be8db3240f6aa1f776058528a3edc3c55bff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE