Behavioral task
behavioral1
Sample
ec005ff54f0851a41adbebe2a6b2d93657644f56913e0f8b2915e7b3cc65ca70.exe
Resource
win7-20240705-en
General
-
Target
ec005ff54f0851a41adbebe2a6b2d93657644f56913e0f8b2915e7b3cc65ca70
-
Size
424KB
-
MD5
04662c2462ec3a8b2c83af95fc46989f
-
SHA1
e6f859d90fbf21c60db21fb68f8e521f705ac499
-
SHA256
ec005ff54f0851a41adbebe2a6b2d93657644f56913e0f8b2915e7b3cc65ca70
-
SHA512
8e041acbf18e5294b21660a882c2654192848509ae3a71f8e124a310d95fcfbeeeee065587e231da2bbe1a14a747e7c0553a0ed8147aa30eb9b49d80e0c8eda0
-
SSDEEP
6144:2tIbZ7ad+t7tetHa8ZlouBOhgO71uED3pcMHWfZJKtBxBCYY5qKTPkB4KX6oSChN:zuuqHvlzO2O5uEOCtB1y42KKoSHH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec005ff54f0851a41adbebe2a6b2d93657644f56913e0f8b2915e7b3cc65ca70
Files
-
ec005ff54f0851a41adbebe2a6b2d93657644f56913e0f8b2915e7b3cc65ca70.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 337KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE