Behavioral task
behavioral1
Sample
ee9c05c193a0b5903be4ce92c64d9355c4ff139fc39bf397ea22d935e1b9db92.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ee9c05c193a0b5903be4ce92c64d9355c4ff139fc39bf397ea22d935e1b9db92.exe
Resource
win10v2004-20240426-en
General
-
Target
ee9c05c193a0b5903be4ce92c64d9355c4ff139fc39bf397ea22d935e1b9db92
-
Size
2.5MB
-
MD5
ee518a993ad3456659b05debf5d61110
-
SHA1
80923a109595705ca6a02b0fd38fb2ae20ea1509
-
SHA256
ee9c05c193a0b5903be4ce92c64d9355c4ff139fc39bf397ea22d935e1b9db92
-
SHA512
87bee9567d92e0f5d320407336e3784c8e9da667cb8bb0797c22f276c0e4486f196c6d8c0075d4fa605a60959800ca99484ada7c894f8dc3c588722cf72c6d64
-
SSDEEP
24576:0oKQtgjyUmGCoKVheM5cMb7DDEFcB92ZxpGb4FuKGo151bALe9XN2T4rnTQk3O8n:DvqjyUm/VhF5YYymcFj5uK9XkMQkvrkw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee9c05c193a0b5903be4ce92c64d9355c4ff139fc39bf397ea22d935e1b9db92
Files
-
ee9c05c193a0b5903be4ce92c64d9355c4ff139fc39bf397ea22d935e1b9db92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE