Behavioral task
behavioral1
Sample
ee12a9ac24bf2ed8d1484449588abbc5b8d7704caa05e791fe7f559e48c8b905.exe
Resource
win7-20240903-en
General
-
Target
ee12a9ac24bf2ed8d1484449588abbc5b8d7704caa05e791fe7f559e48c8b905
-
Size
4.9MB
-
MD5
9c91a95a4f7e5c63e705b60239898b3a
-
SHA1
2f91b14960c012f9a4427184e417e5307b38411c
-
SHA256
ee12a9ac24bf2ed8d1484449588abbc5b8d7704caa05e791fe7f559e48c8b905
-
SHA512
509a060a54565baf374d6f0344d679ac2b93233f73dfcb67b2eef8e65589de2ce5773db7daf34bd30dded500c3b9ee990ba62158ca5f8ec5a3e13c9bf87c10de
-
SSDEEP
98304:b+uhMz1+Gcs4Enr6pnKm3NeKV1UW7xmLuofTzIZcWHM4y0/WjVMfF2:iuKZtcsvnr6pK0j7xma2zIZHHJp+jv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee12a9ac24bf2ed8d1484449588abbc5b8d7704caa05e791fe7f559e48c8b905
Files
-
ee12a9ac24bf2ed8d1484449588abbc5b8d7704caa05e791fe7f559e48c8b905.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE