Behavioral task
behavioral1
Sample
e242a8de6dc6a66ffb9a6e40abc529d0.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e242a8de6dc6a66ffb9a6e40abc529d0.exe
Resource
win10v2004-20240226-en
General
-
Target
e242a8de6dc6a66ffb9a6e40abc529d0
-
Size
136KB
-
MD5
e242a8de6dc6a66ffb9a6e40abc529d0
-
SHA1
a373fbde039a04be0cf38b708bc8fd2c87517cc5
-
SHA256
19a5f425bbd4f11a99fd80540ffca5f5106d2bba070612e7c4ff23de2be07b61
-
SHA512
4c83f7e4c384fec88e1e4d7922fe1d4fc07191425d3424df5c4a065b6f66e5186bd50276ac39430a35b3697d1de0f3a585271c48a828ef7b06386015b4980014
-
SSDEEP
1536:JcZLocFWXthORDpFwfgfogtjLW117YfwwgTN2cPDkBZEYa9YbeGRFduz8EaS:JSoTORDpRJVL5fwwQN2PBZERu9AZaS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e242a8de6dc6a66ffb9a6e40abc529d0
Files
-
e242a8de6dc6a66ffb9a6e40abc529d0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE