Behavioral task
behavioral1
Sample
e2250d72eed0210c97bd872752c16bc0.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e2250d72eed0210c97bd872752c16bc0.exe
Resource
win10v2004-20240319-en
General
-
Target
e2250d72eed0210c97bd872752c16bc0
-
Size
192KB
-
MD5
e2250d72eed0210c97bd872752c16bc0
-
SHA1
193ee2a77ad13902152a95af38f16254e6fa079f
-
SHA256
49a674372281b642e4cf69ab3a19165f6cb0fbe07cd9185a4c75bed0aed85ddb
-
SHA512
dbcf1781207d15c044289911224f7dfbabec0d9eb55d0dad04692ea8ccbdbaed7291e06ce25d65e6e4841c3fae953c98ca5df2373b4d5636e6cef232dc848304
-
SSDEEP
3072:FDaM7e2+WFNYlsznD/TxBPFOsNim3E4bdGPqdojAZSRJFhr9hoO:FD5y2lFGlsznDLAzPqGjfRpo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2250d72eed0210c97bd872752c16bc0
Files
-
e2250d72eed0210c97bd872752c16bc0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PX� Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE