Behavioral task
behavioral1
Sample
e75b4b0395921814a548233feb9cdebe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e75b4b0395921814a548233feb9cdebe.exe
Resource
win10v2004-20231215-en
General
-
Target
e75b4b0395921814a548233feb9cdebe
-
Size
1.6MB
-
MD5
e75b4b0395921814a548233feb9cdebe
-
SHA1
49bccb0803055693fa9f3cc8faa238669af015ce
-
SHA256
2198c60dbd8ed36a84e2041d7ebe6a4160863cd06a4a7e62b557779262d480a1
-
SHA512
ac9db88d4ae294e05b28974fbc212488e337cb617a460c2e6c1b2d8e9a3e0c6bbae21e6a9a807e756aeaa7a44e22a235c321e1c5b0691b6da019a8ac86f4efa0
-
SSDEEP
49152:vCpdq3bBjysryJb+bNG67UXcakLz0CIWeuJaiCT+AfzDZ1cakLz0O:vC7qrBjysryZ+bNG67wcakcCteuJaiCC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e75b4b0395921814a548233feb9cdebe
Files
-
e75b4b0395921814a548233feb9cdebe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE