Behavioral task
behavioral1
Sample
e122043a316f5c3a74a765212bd54bf3f8cb3c4e4a9a88e9643d172f114a9b8d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e122043a316f5c3a74a765212bd54bf3f8cb3c4e4a9a88e9643d172f114a9b8d.exe
Resource
win10v2004-20231020-en
General
-
Target
e122043a316f5c3a74a765212bd54bf3f8cb3c4e4a9a88e9643d172f114a9b8d
-
Size
4.6MB
-
MD5
132682a39ffcb7aa1c4b41cd063c9ecb
-
SHA1
1a7f6d8b1aed7ba33605d0f70eb0e82e143e8f6e
-
SHA256
e122043a316f5c3a74a765212bd54bf3f8cb3c4e4a9a88e9643d172f114a9b8d
-
SHA512
f8ad0a050911ae90153435773b1bdaa347a5eba4eeb0d14a3545b2d21bc029bb82540c6dc35d6c93ae9c7a7e65059fe2e4a29aa0d056f256a95afee7b4c9d84f
-
SSDEEP
98304:tCLkqtlHfdzqXSwIkMC8BCVZtd34I/N2juTG7kiBPr78xP3qBu0jjM4Ff:tComHFzqrIc8k94I/NlONdn8xyBuejMi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e122043a316f5c3a74a765212bd54bf3f8cb3c4e4a9a88e9643d172f114a9b8d
Files
-
e122043a316f5c3a74a765212bd54bf3f8cb3c4e4a9a88e9643d172f114a9b8d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 89.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE