Behavioral task
behavioral1
Sample
e03cd5607847ec3be17ccbb58bdde85b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e03cd5607847ec3be17ccbb58bdde85b.exe
Resource
win10v2004-20240226-en
General
-
Target
e03cd5607847ec3be17ccbb58bdde85b
-
Size
133KB
-
MD5
e03cd5607847ec3be17ccbb58bdde85b
-
SHA1
ffd8cfb76971e33ea3eeffcdd24b3744d8d6f0a7
-
SHA256
544fc3ad4dccd2e9e284915491ed97ec5548eff1bfd6cb3d47aa81030bc5fe24
-
SHA512
ebd969d4f4da4f95fd3d32806acb2c50c9f62523e69ef010af61fce24dd13ea7dc5b0c06dfe0db9b3a019bdbcb1afaf05e6d44dc33b03dfb40796cf6d30c1304
-
SSDEEP
3072:vr1EVz13GUwewdj1Es9v/XAL2k6oh+WyD15BI08+GcdrmQ:vrqz19dq7HkHh+WyqdmmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03cd5607847ec3be17ccbb58bdde85b
Files
-
e03cd5607847ec3be17ccbb58bdde85b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE