Behavioral task
behavioral1
Sample
e04683abd4ac65114afaf8b6928d2fe3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e04683abd4ac65114afaf8b6928d2fe3.exe
Resource
win10v2004-20240226-en
General
-
Target
e04683abd4ac65114afaf8b6928d2fe3
-
Size
35KB
-
MD5
e04683abd4ac65114afaf8b6928d2fe3
-
SHA1
4b51de0d5b9b95ffef53b2a3fc04ff6633d33465
-
SHA256
2e1f3a2131048e2c0c9b052af71d37ee7aa4cc09a8c031692666674bb812ca63
-
SHA512
82df2c7de609062fb313a4886907c0354d99408f3e06d295465dc7f416184599036dee50ec3eebbaf38e8068c6f11f81a3971fa48bdfc0dc00541641f599fbf6
-
SSDEEP
768:d6twkRU4LY0BSEQe1V28yzn4zDz/sLk6xsgpz9t2aJPvUBVW:dcxeP0Uu108KEz/2FKa9vUPW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04683abd4ac65114afaf8b6928d2fe3
Files
-
e04683abd4ac65114afaf8b6928d2fe3.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE