Behavioral task
behavioral1
Sample
e660efb84118a0f9be703c692a6e24ce.exe
Resource
win7-20231129-en
General
-
Target
e660efb84118a0f9be703c692a6e24ce
-
Size
784KB
-
MD5
e660efb84118a0f9be703c692a6e24ce
-
SHA1
8823049ebbaa0bfc9b2fdd793c614bdb119882e8
-
SHA256
1569b814fe386f3c5aa16992b5a08d7d284f86e4b4a474ddfb7f997536001b14
-
SHA512
b8d44b02d63428d3301cb83623400d7e1ba39da822b01ec6396cfa0534e46ad142061a474dca8728d4270e86071fd814183c51247a4e0f0108346f92cd0bad99
-
SSDEEP
24576:MqTE8D1x7JGxPQGxbRbXNyML8sJ586Jg:TpFJNsR7IMLfJ5rS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e660efb84118a0f9be703c692a6e24ce
Files
-
e660efb84118a0f9be703c692a6e24ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE