Behavioral task
behavioral1
Sample
e015b357c52b71fc279b2966b0097e32.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e015b357c52b71fc279b2966b0097e32.exe
Resource
win10v2004-20240226-en
General
-
Target
e015b357c52b71fc279b2966b0097e32
-
Size
133KB
-
MD5
e015b357c52b71fc279b2966b0097e32
-
SHA1
039e95ec74c4e218032cc4ec7ac9a2464552ce03
-
SHA256
1f8f2d32f2c37ca07fa144baf714b8e4df92a4c36ec34faea52b0c06cfa42325
-
SHA512
d6e207dbc37ae56c4f2ef9da616cb15416fa8946603bb715bfd39749568e971afd6ecd07f664e2d7a40c770befe680d29ebbf112ba5c48a2167ef171ffffa911
-
SSDEEP
3072:2XfjvMPsQgvxF68UOjCN2jX8Cb35c61Fnqy8zNqr7OfIlNsaQQ:6jWsFa8CM/z5cUFg5q3EIQaQQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e015b357c52b71fc279b2966b0097e32
Files
-
e015b357c52b71fc279b2966b0097e32.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE