Behavioral task
behavioral1
Sample
echo-12DRSO-LQdNuUix.exe
Resource
win7-20240708-en
General
-
Target
echo-12DRSO-LQdNuUix.exe
-
Size
4.7MB
-
MD5
1afc702a11b453d8d16b89b69d43da15
-
SHA1
5ba5da1b24a4a8f55e55837ed8e5d69d2de07a89
-
SHA256
8b238d92912eda7ccba4d3c99c0531cb2ebc773b38bd8780bcdc76c5a9112da4
-
SHA512
7c59d1d6d5c53bbeeec4ba7403abb722956359c201c0d3df8e8e6190d20321dfdcc9a01ba869edbc153b64091134ef776a29d0512cd4221ab4e82d06a819eb04
-
SSDEEP
98304:FAyQIw/eo+QaxtkMLfJJyggZjUDCtQQJ9frdcohActgfjcGufm/fXp2GoYSDyQiR:FAyQIGDYWIBJygujqCtR9bU4eXXtS+QT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource echo-12DRSO-LQdNuUix.exe
Files
-
echo-12DRSO-LQdNuUix.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 21.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE