Behavioral task
behavioral1
Sample
ecaaa3b0466fc5522fa7acb2b111ef90N.exe
Resource
win7-20240705-en
General
-
Target
ecaaa3b0466fc5522fa7acb2b111ef90N.exe
-
Size
1003KB
-
MD5
ecaaa3b0466fc5522fa7acb2b111ef90
-
SHA1
d00f8d92afd9b1b7c2d40c01ee43d90e3d402602
-
SHA256
0b57aae09c97ab05d94f979ebcd20af1acffc2d9eb48d4cc613a259575dc3f08
-
SHA512
95671738f8b73ccd1aa2743cfd01902c30b93888a45041e7ee4fe7f1526240028a8bc7cd6b5cbdfbadd9b582ff055ba57f63f43ae8cf30a1e1613ff4a6ab1209
-
SSDEEP
24576:0Rjm/CPA8Lp0lXiLwkKmE6YFUTVe1u17lNFoy:0Rjm/CI8LGdiLwkKmE6YFUTVe1u15NFo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecaaa3b0466fc5522fa7acb2b111ef90N.exe
Files
-
ecaaa3b0466fc5522fa7acb2b111ef90N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE