Behavioral task
behavioral1
Sample
i4Tools8_v8.16.874_Setupceo9.11ceo.exe
Resource
win7-20240903-en
General
-
Target
i4Tools8_v8.16.874_Setupceo9.11ceo.exe.v
-
Size
254.9MB
-
MD5
1c1225e76dcf40cfcdbd86052ffa3cb3
-
SHA1
307adcc949eb46b79eb6c8ab1295972a095ffce7
-
SHA256
2decad2d07cf8780eee46142dcf498cf61dc55d3bdc4a4244e47a736322e3874
-
SHA512
7bc51d8d344e14835f7cd284009abfe8ce555693c66ca9ebb8b8ad31e7c1a4f0c9073068bbfcb74056707a4fc86a55b7362126577239815e6afbc6fbc547ab8f
-
SSDEEP
6291456:v55AgPprFzZJjLiaO0UQAoLeayBQKKDoW/vai6:v5aGp5FJjCQAoL7KAh/vm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource i4Tools8_v8.16.874_Setupceo9.11ceo.exe.v unpack001/out.upx
Files
-
i4Tools8_v8.16.874_Setupceo9.11ceo.exe.v.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 219KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ