Behavioral task
behavioral1
Sample
e058e9ea375b919a53cf8aa23dca2f00.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e058e9ea375b919a53cf8aa23dca2f00.exe
Resource
win10v2004-20240226-en
General
-
Target
e058e9ea375b919a53cf8aa23dca2f00
-
Size
20KB
-
MD5
e058e9ea375b919a53cf8aa23dca2f00
-
SHA1
3857a822911d8102db8cf8e7ed77348de3142720
-
SHA256
dbb6607a0f06945e299a750351089f592628f932954b12b9507e9c418de9f046
-
SHA512
8cd9856682fbb3c8eaafed73185fbe6268f5655011c38669d808c8ffff6030faab0a5a8ffc83fb1dfdf4a74cf9c0bae80b1705cbd05e5bd9eb5d87bac9c68dcf
-
SSDEEP
384:EeYqDBnNhQmXfaxiUh56aDZa+SLTBMUM76qzKYV+7xPicG9mnzXS2PCjl:0IhovnbSL1M764KhicGUnzi2PCjl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e058e9ea375b919a53cf8aa23dca2f00
Files
-
e058e9ea375b919a53cf8aa23dca2f00.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE