Behavioral task
behavioral1
Sample
e2142f18a0deedd655e1a3fcbaa78a11.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e2142f18a0deedd655e1a3fcbaa78a11.exe
Resource
win10v2004-20240319-en
General
-
Target
e2142f18a0deedd655e1a3fcbaa78a11
-
Size
133KB
-
MD5
e2142f18a0deedd655e1a3fcbaa78a11
-
SHA1
3c495d9f40156e99c349499d8aa7fa3634de4760
-
SHA256
ba45e681d328d3c622ffdb158471954f72cc9e9bfc13924ce7dc33862d48084c
-
SHA512
3301ac3dc515f622b3d29df5974a2efdeb8958c9d0172db7c247ca13daffe4359ac4fb2fe60a9448c172c9ace29faa2aefd9a5bbe7e89630917f89fcfbd78124
-
SSDEEP
3072:9T12JH4F6KaUOh90QiINCa7LNHvTh6C4X008kxfauH0okf1J+KzT/Xin5Q:3CSeZNkHE08puS1J/zbS5Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2142f18a0deedd655e1a3fcbaa78a11
Files
-
e2142f18a0deedd655e1a3fcbaa78a11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE