Behavioral task
behavioral1
Sample
e3ef2dbdb6cacd8c5f7488c750516517.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e3ef2dbdb6cacd8c5f7488c750516517.exe
Resource
win10v2004-20231215-en
General
-
Target
e3ef2dbdb6cacd8c5f7488c750516517
-
Size
1.2MB
-
MD5
e3ef2dbdb6cacd8c5f7488c750516517
-
SHA1
46ac1d7828983b17cbe80bc423b80fb6fc358354
-
SHA256
554e0da13d835174bef3e0d5c8278898b97a63472e837f7fc9571e5f5099d436
-
SHA512
6dfddfa52d99a3947e428d25fd75e0df215799c409c4b079bdc4bb15ce72cdce9d47154263c24117e4cfbbf32c8e0a4bd51a6393af908a98144a02b9d856eb54
-
SSDEEP
24576:IUr8LrTpaU72x3IBVht/3EvrCcI9jdx3IBV:HQlN2iVD30ediV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3ef2dbdb6cacd8c5f7488c750516517
Files
-
e3ef2dbdb6cacd8c5f7488c750516517.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE