Behavioral task
behavioral1
Sample
ee8c04cdacccfc70e3ffce87d9101f4fb053d5c679bcc6e97db3ef5128db1f74N.exe
Resource
win7-20240903-en
General
-
Target
ee8c04cdacccfc70e3ffce87d9101f4fb053d5c679bcc6e97db3ef5128db1f74N
-
Size
89KB
-
MD5
b2c942f8adb4a50fbb5800806d3e2e60
-
SHA1
0f368e13d4c119f374fc06bc060e65ae43275377
-
SHA256
ee8c04cdacccfc70e3ffce87d9101f4fb053d5c679bcc6e97db3ef5128db1f74
-
SHA512
7562231bbe84ce08b9d15f48e47395433791b20c449ba5d5cf9cea2ddc27ea1137badf6eb6236be56c46a0b69cf2913792faca69ce3e0cf6b1cafbe5cefe6cfb
-
SSDEEP
1536:C1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox7e:K+4MJIkLZJNAQ9Jo9e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee8c04cdacccfc70e3ffce87d9101f4fb053d5c679bcc6e97db3ef5128db1f74N
Files
-
ee8c04cdacccfc70e3ffce87d9101f4fb053d5c679bcc6e97db3ef5128db1f74N.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE