Behavioral task
behavioral1
Sample
eec618cae6be75a4b12df4a8ba129170N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eec618cae6be75a4b12df4a8ba129170N.exe
Resource
win10v2004-20240802-en
General
-
Target
eec618cae6be75a4b12df4a8ba129170N.exe
-
Size
1.1MB
-
MD5
eec618cae6be75a4b12df4a8ba129170
-
SHA1
966b28734978e6d2734740d57d1da3b026fdae6a
-
SHA256
6f54d34f88f2f8e67d06aeef4bfd2edd74b247bea03a3e7e3301cbc6db7fd5c4
-
SHA512
1647031a4618c6d1de0c6609e90b5ac91f53961ecad2a873f49c5f9d35058e20d7745a2350088fe00ad51198ecd09795e54b1a712f85548ef665cb10a1572e55
-
SSDEEP
6144:KbEv73qKc+y+2VU8uwB3xwq23tpNwaXcSl+wb9LlkfnmemoT2oCCP67tFym+I56T:tehAdUCQULlzRc2HK5I5681sue
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec618cae6be75a4b12df4a8ba129170N.exe
Files
-
eec618cae6be75a4b12df4a8ba129170N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE