Behavioral task
behavioral1
Sample
e076b56cdade1107b5af71557139ab78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e076b56cdade1107b5af71557139ab78.exe
Resource
win10v2004-20240226-en
General
-
Target
e076b56cdade1107b5af71557139ab78
-
Size
195KB
-
MD5
e076b56cdade1107b5af71557139ab78
-
SHA1
b7aa6e82b35d219ca56607ebe0b140b63d4faa26
-
SHA256
2b1b5e6bb0b2b7a0ecf51ac69c6f021279da4a313c3ccd3c0e49f046a85346bd
-
SHA512
cc6f95b9c7f2906ca05f46e2f239ec0e950225d9e91ca471494a7cbf2be19fc9fb6d898c820830b9ebecb330172804ab7dbe1ffe4c4301f47114fda248318d7e
-
SSDEEP
3072:sr3KcWmjRrzSazioCzDf7QPCsBc0x4o8DA6SZYwvSFBSRxKYXXejKgcPAdOEeITl:/vL7QK/0x49ALZbvySRBO/chAEJuXr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e076b56cdade1107b5af71557139ab78
Files
-
e076b56cdade1107b5af71557139ab78.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE