Behavioral task
behavioral1
Sample
e229235d14796b0e61fcbdab03332630.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e229235d14796b0e61fcbdab03332630.exe
Resource
win10v2004-20240226-en
General
-
Target
e229235d14796b0e61fcbdab03332630
-
Size
30KB
-
MD5
e229235d14796b0e61fcbdab03332630
-
SHA1
a9df98ef1426ef1e92104a58033fe46499b8fc40
-
SHA256
641c4e3d2fcc9a82dc89c64312fd4c823cbbc11e68e06da9a77cca418bab2603
-
SHA512
84fdcdd14c637d80ddca70d3cbd7078f1f420564f6c8ee487903aa3e0d782466afe5acf0f50f32a24cd6a8d8c8668be7d5ab5a7e290e313aeeb65c9d87b7c73c
-
SSDEEP
768:kG12ciXM7l59sJMnpB2in9rgXydlZdgDcgoakpgxP:z12/XCl59sJMj2CrgmKN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e229235d14796b0e61fcbdab03332630
Files
-
e229235d14796b0e61fcbdab03332630.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE