Behavioral task
behavioral1
Sample
e0e30d40e2c16c867cc9d98550f933fc.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e0e30d40e2c16c867cc9d98550f933fc.exe
Resource
win10v2004-20240226-en
General
-
Target
e0e30d40e2c16c867cc9d98550f933fc
-
Size
1.6MB
-
MD5
e0e30d40e2c16c867cc9d98550f933fc
-
SHA1
50c25fc64c994ca989ff5b043f2d23e1a95e3769
-
SHA256
ab39a1598d5384ec6ad06dacb1231a6fba57e271cb51e582a1118c81d654e99a
-
SHA512
c93feddde96126d8eb5220eb3c2c7f94daf562434db9c5b2bb428a71071741e684ed062efc0c2df49155487aec1edb62ebfaf2e183b40e75727ec524b3538bcf
-
SSDEEP
49152:goBN5AFVu14EcakLz0YIzH15jsfWXYi1JBcakLz0O:gsN5AFU4EcakcYAH15jyWIi1JBcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0e30d40e2c16c867cc9d98550f933fc
Files
-
e0e30d40e2c16c867cc9d98550f933fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE