Behavioral task
behavioral1
Sample
e0f915f06401d9886d8c5a2236d04cbd7e0a91811a0735a0f8398417f6ecc341.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e0f915f06401d9886d8c5a2236d04cbd7e0a91811a0735a0f8398417f6ecc341.exe
Resource
win10v2004-20230915-en
General
-
Target
e0f915f06401d9886d8c5a2236d04cbd7e0a91811a0735a0f8398417f6ecc341
-
Size
3.6MB
-
MD5
cc3aa598e52266da292e8f7740e93dfd
-
SHA1
bfb9fab534ea9309996b8ce613f9fddedbd68b50
-
SHA256
e0f915f06401d9886d8c5a2236d04cbd7e0a91811a0735a0f8398417f6ecc341
-
SHA512
06f232d4954a443c2f85ffb762b5236d261074cea6cf6ae09d94ca7105131b622e312a6c12abbf984a521ea468e6f40e24739918dc1b39be761bcbef5cb9b1a5
-
SSDEEP
98304:g7TdDrZdDcg9syJVE5bBIFvGfToa6aI5icoX:g7TdDTlsIVEYefT6I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0f915f06401d9886d8c5a2236d04cbd7e0a91811a0735a0f8398417f6ecc341
Files
-
e0f915f06401d9886d8c5a2236d04cbd7e0a91811a0735a0f8398417f6ecc341.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE