Behavioral task
behavioral1
Sample
e04ba3fbf7572cfc8187d23a5f48736c.exe
Resource
win7-20240221-en
General
-
Target
e04ba3fbf7572cfc8187d23a5f48736c
-
Size
370KB
-
MD5
e04ba3fbf7572cfc8187d23a5f48736c
-
SHA1
1b0fdd7eb74cefb6b3a40e8ae41251a8b579115e
-
SHA256
228b5ae606f7713a17f65d608ea639263e246d6abbcc3fdcc443757f4bc9b2a2
-
SHA512
37e638106bba015d82cae55a4b527a64e7099ea4bb258d8ca0bdf973d68002a9f1db8f75ad0b79a8bb56d22786ab06516bf6f4dd8c6fd4e839f40b5b38d69098
-
SSDEEP
6144:NpodS7SsgFOsq2MbS9QV84R2gQpAEHQ6dobm58zcFCQRG+Y6AKzQlOoSAJkTV5n:N6d9s7s+LDgAEwS04N/MZzKslOoSAJk3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04ba3fbf7572cfc8187d23a5f48736c
Files
-
e04ba3fbf7572cfc8187d23a5f48736c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 344KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE