Behavioral task
behavioral1
Sample
e207845c1595b2dd91bf43998a621e41.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e207845c1595b2dd91bf43998a621e41.exe
Resource
win10v2004-20240226-en
General
-
Target
e207845c1595b2dd91bf43998a621e41
-
Size
376KB
-
MD5
e207845c1595b2dd91bf43998a621e41
-
SHA1
a10c8e94663383e2ff034f8cbe0b46f638894cb1
-
SHA256
c6efa7ca97dbc075b3831b121f1afa8977c4896739f3f5d87df42b6fd51faed6
-
SHA512
f4e84397122bebbc7f857819e5f52136c35a4e98c9f4001faf55b5e8aabbac90111134febf226e3a053bb7c008939b4f3fa8298f464df77d842d74b587fa2373
-
SSDEEP
6144:9LCGWgl0cOg/6oO4LroTmKRzPfY0JPhNLPr6VbJEbHnjt42T+UKiIn1Ym:AJt9opXozPfP9hNyVWbHnRLh9aY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e207845c1595b2dd91bf43998a621e41
Files
-
e207845c1595b2dd91bf43998a621e41.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 692KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE