Behavioral task
behavioral1
Sample
ee1be883ba791588d3a97e761b3eba917aab37711013c2844723b5129b9ff839.exe
Resource
win7-20240220-en
General
-
Target
ee1be883ba791588d3a97e761b3eba917aab37711013c2844723b5129b9ff839
-
Size
2.5MB
-
MD5
f7da051c588767ccee183d6874f8aed7
-
SHA1
bf40a8f76c433085133fc9dd9c3f0ce93d56f127
-
SHA256
ee1be883ba791588d3a97e761b3eba917aab37711013c2844723b5129b9ff839
-
SHA512
52a48a145ab54c635a03469e66fd9365ce5cb3b365447fb972748c8272ad22bdb4b9f6580cdb72f9c005da71d38ef979a41c72337eef2e4d06182e5bd5de031b
-
SSDEEP
49152:aIw3E+7/Tsr5OQFO5ybEex1PeU7zdLg4P5RyTQs3N/90nv1fdfp9Wk:1R+7YrbOmxYU7zl3PXyTQ+N/9q1fdh9B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee1be883ba791588d3a97e761b3eba917aab37711013c2844723b5129b9ff839
Files
-
ee1be883ba791588d3a97e761b3eba917aab37711013c2844723b5129b9ff839.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
N�A��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE