Behavioral task
behavioral1
Sample
e21531844be488fd7230d22d8583b661f423e6a9138ac7091cc38cc395e9ac38.exe
Resource
win7-20230831-en
General
-
Target
e21531844be488fd7230d22d8583b661f423e6a9138ac7091cc38cc395e9ac38
-
Size
16.0MB
-
MD5
54ab3d66d2bf2f5045bc950b3e27fbc3
-
SHA1
8ea12a00d765b1184192de6de1536bdd3d89b134
-
SHA256
e21531844be488fd7230d22d8583b661f423e6a9138ac7091cc38cc395e9ac38
-
SHA512
b3739c955d6062f3666749951d6f9946bab22272d14db529c544f01aa3af0c8a45520a7e807fa169a4119a587e613c0e67b482a0d282f37022de82b570ac8a69
-
SSDEEP
393216:Ci35JXZbKrbqJXo7B/cYt4Huf8Ey2+74pQ/YB9D+PbhUakuvnoE:9X5KfqJ47pceTkO+74pBaPtUmo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e21531844be488fd7230d22d8583b661f423e6a9138ac7091cc38cc395e9ac38
Files
-
e21531844be488fd7230d22d8583b661f423e6a9138ac7091cc38cc395e9ac38.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15.1MB - Virtual size: 15.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE