Behavioral task
behavioral1
Sample
e2ceab7e06c078d62a9c623289da53dd608d57142c1f84d4798423b891a8e459.exe
Resource
win7-20240903-en
General
-
Target
e2ceab7e06c078d62a9c623289da53dd608d57142c1f84d4798423b891a8e459
-
Size
10.0MB
-
MD5
f27b72176f25a58cfadd820fed0eddf4
-
SHA1
0392d2a404aed9e6f3a76b13341364d931c6b315
-
SHA256
e2ceab7e06c078d62a9c623289da53dd608d57142c1f84d4798423b891a8e459
-
SHA512
dd00c35a27609905c71ef368903e5fb0e5a11f152516a8f37fb307bfa2c2f6f2bb92c3a7c99a53c3020e5df2efe11a1bfb3bd22d17b03027fa22ce7ab8d183a0
-
SSDEEP
196608:iuKZtcsvnr6pK0j7xma2zIZHHJp+jVqHwHiBjooyEFgAw5+MEo1Vh9tzPvPdq:Etcs07xvL+jVq/ioJFY8ReVhPzPdq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2ceab7e06c078d62a9c623289da53dd608d57142c1f84d4798423b891a8e459
Files
-
e2ceab7e06c078d62a9c623289da53dd608d57142c1f84d4798423b891a8e459.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE