Behavioral task
behavioral1
Sample
e7e9ff47c45edde4d9f81168a55fd099fc851cd55ec4c5a00205927fb048ff9b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e7e9ff47c45edde4d9f81168a55fd099fc851cd55ec4c5a00205927fb048ff9b.exe
Resource
win10v2004-20230915-en
General
-
Target
e7e9ff47c45edde4d9f81168a55fd099fc851cd55ec4c5a00205927fb048ff9b
-
Size
1.5MB
-
MD5
c269650b600466b1d931ec30d4c41573
-
SHA1
f7a3764e9d38872a1e9bf1cb3c7fca3df048a030
-
SHA256
e7e9ff47c45edde4d9f81168a55fd099fc851cd55ec4c5a00205927fb048ff9b
-
SHA512
751ca145004e4311b2ec58faebe584c733abf86705f7fb172509710cd9865b097cc44d605e785f418ae8a7b99f49b9cae76d2479b1e306151dbec3308e58bfc5
-
SSDEEP
49152:y4DZE7mdbWHgVO1LkU4HPikKytV3BuFJyMK9gnzzRq:bDZyAVKz4HPiFCVAFgMXzzRq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7e9ff47c45edde4d9f81168a55fd099fc851cd55ec4c5a00205927fb048ff9b
Files
-
e7e9ff47c45edde4d9f81168a55fd099fc851cd55ec4c5a00205927fb048ff9b.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE