Behavioral task
behavioral1
Sample
ee264063bd35ecd926c0b30e36734704f531ff6bea0c263ae208ff8ea9be56b9.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ee264063bd35ecd926c0b30e36734704f531ff6bea0c263ae208ff8ea9be56b9.exe
Resource
win10v2004-20240802-en
General
-
Target
ee264063bd35ecd926c0b30e36734704f531ff6bea0c263ae208ff8ea9be56b9
-
Size
509KB
-
MD5
7ea1fb0b48e915865fbc0d95d330ada2
-
SHA1
edf64efd1f6b0a94292951485f2acf61815be0ab
-
SHA256
ee264063bd35ecd926c0b30e36734704f531ff6bea0c263ae208ff8ea9be56b9
-
SHA512
e8aacf8f7d4f1e9d4dd1ab4f67ced5871a5d60e61be25961672a430f821cfb72c8bf3dd717f719a5c87f1508b443f2516420ff3a47856eab94b64dc74378a5f2
-
SSDEEP
12288:GNBRdHiWI3SVRIPg7/6h5wZ0Sgq9oNBSk5kgv8uiv:6dCWMFPNwZ0COkgUN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee264063bd35ecd926c0b30e36734704f531ff6bea0c263ae208ff8ea9be56b9
Files
-
ee264063bd35ecd926c0b30e36734704f531ff6bea0c263ae208ff8ea9be56b9.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 836KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 474KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE