Behavioral task
behavioral1
Sample
e0a7b8a43000e752fec1dea369ed889e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0a7b8a43000e752fec1dea369ed889e.exe
Resource
win10v2004-20240226-en
General
-
Target
e0a7b8a43000e752fec1dea369ed889e
-
Size
3.9MB
-
MD5
e0a7b8a43000e752fec1dea369ed889e
-
SHA1
b528a3604beda20edab1dd4dfa3d3e87be9c0dce
-
SHA256
85890716f111080befed0b9b3d403a97a0b617da39061b0eb12b65ac2dffc28b
-
SHA512
2e0b8fe5684d08b5d6b6db646a24ec49d136ef04279b80039c93e16746b17e087f8b58053676e4e09919308b502603a84dea52eb22c10fcdb8423063fc4b80b6
-
SSDEEP
98304:QpQfmSWvHcakcibiqhMbMgOn7n0bcakcibiqhnPQeKJ/DLcakcibiqhMbMgOn7nR:EQfb4dlirybMgOnkdlirNPtKJPdlirys
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0a7b8a43000e752fec1dea369ed889e
Files
-
e0a7b8a43000e752fec1dea369ed889e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE