Behavioral task
behavioral1
Sample
ec4579f1f93bdcbecbbf2a434a9d78f0N.exe
Resource
win7-20240704-en
General
-
Target
ec4579f1f93bdcbecbbf2a434a9d78f0N.exe
-
Size
530KB
-
MD5
ec4579f1f93bdcbecbbf2a434a9d78f0
-
SHA1
647d462e05148c3da5b99a37c7f8ccda9ca1d9f5
-
SHA256
97af206c2d8bfa084b3918c85f11c47123c49e17b37728ef8b709591cecacbab
-
SHA512
750e79f56273d72d081b319fc2b7e39f211a1ef37138afc63405850f86a74fbabf27fcea265009bb66a64edb707c88bfba6bbf70ca4408e41e25b0dd50d13f43
-
SSDEEP
12288:y4wFHoS3eFp3IDvSbh5nP+UbGTHoSouKs8N0u/D6vIZv:HFp3lzZbGa5sov
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec4579f1f93bdcbecbbf2a434a9d78f0N.exe
Files
-
ec4579f1f93bdcbecbbf2a434a9d78f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE