Behavioral task
behavioral1
Sample
e21faff072fd23fb3c52c4849df252e7.exe
Resource
win7-20231215-en
General
-
Target
e21faff072fd23fb3c52c4849df252e7
-
Size
3.1MB
-
MD5
e21faff072fd23fb3c52c4849df252e7
-
SHA1
4503965c7b99844d532fc7f20204062c0be8b4e8
-
SHA256
17501e76ba526c89b14f06b208eb6979ccdf5e508533c31a7bf45578005da0da
-
SHA512
851e5e8a15c19a58690bad6bb77b7f1ef1504b5be2d7cfc11b067a730bd4bfb4133216923dfac371270ae81592303c590958b667fbe7f9cfc19f51e535b9dc10
-
SSDEEP
49152:d1W/L5W7ujOF/JJY3PzhjvLzSkhbu7X3vt7sAWPBAdpOmaDWxaYx9cm:+/tW7gOF/JJOljzukhbCVPWPOj0WxN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e21faff072fd23fb3c52c4849df252e7
Files
-
e21faff072fd23fb3c52c4849df252e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE