Behavioral task
behavioral1
Sample
e11201c7ac19784bc592c16cb22474d8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e11201c7ac19784bc592c16cb22474d8.exe
Resource
win10v2004-20240226-en
General
-
Target
e11201c7ac19784bc592c16cb22474d8
-
Size
127KB
-
MD5
e11201c7ac19784bc592c16cb22474d8
-
SHA1
06e8d2f89972008cd2e8accd51d4d24231cc220d
-
SHA256
e1c04862d281538107165dffd889d5753e7a342b2838790d0724920cdf7fe726
-
SHA512
b6cde4eb45b0a5e2c20a45f528f3e6ce8f1056eeb8a160996844c790baec707fdedbd64b72daca60d12e7087dad0311a10759b2da42a95e0b2f3e9e8ed050570
-
SSDEEP
3072:zlj9/LA+PQ4jLATNe7/7naVWQt9ie+wQc3peQIyxeI2outI:zh9TH5jUxe7nj7PI2oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e11201c7ac19784bc592c16cb22474d8
Files
-
e11201c7ac19784bc592c16cb22474d8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE