Behavioral task
behavioral1
Sample
e0dcde805c08bd0bcd63a12e4b4db944.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e0dcde805c08bd0bcd63a12e4b4db944.exe
Resource
win10v2004-20231215-en
General
-
Target
e0dcde805c08bd0bcd63a12e4b4db944
-
Size
133KB
-
MD5
e0dcde805c08bd0bcd63a12e4b4db944
-
SHA1
37ba3bd0f4276a5dbb267c5bc6758670ce1d5ba4
-
SHA256
746bfa5078a793945d42e23e0fc11a0e738bfbc27d8a528dff54f61c1b8bef06
-
SHA512
e5ca098b2aba9534928213ba226cdd388cc340cbc37ba875121b7b871a19b163e2a8947f0946a3fd4a40edc5eb5574acd448a231e42487ddd61b56fee96107b1
-
SSDEEP
3072:AoHNYahEe8fH4WjYsewRNWdwK9IWpnXIM2qpmR3FGNqxkALQ:AoiaetHbteSNgVnYxKmR3FfkAQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0dcde805c08bd0bcd63a12e4b4db944
Files
-
e0dcde805c08bd0bcd63a12e4b4db944.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE