Behavioral task
behavioral1
Sample
e249fcf802410700001d35c9452c5e86.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e249fcf802410700001d35c9452c5e86.exe
Resource
win10v2004-20231215-en
General
-
Target
e249fcf802410700001d35c9452c5e86
-
Size
5.1MB
-
MD5
e249fcf802410700001d35c9452c5e86
-
SHA1
b592c65da05c2983325b0a19a32de202b2f112ca
-
SHA256
77d119a0555956b0b8126dec376a870c5dc7129ebfd0ede6e3aee7934a481634
-
SHA512
bce0272532bd0e3e5ddb9fafc01d196f20c32882ed0b32009a4ea8f080d502132d3496564cd727c864c41a3deb9cc8fb4ed4ce77bc70a168bf96293e7420edcd
-
SSDEEP
49152:E+EkTQW6UvLBhbRHoMCwTF9dY5f1ktgm9okhJ/ay37LYssT9IYzSxESmU7v+L3No:VdtthKmFnX37L6qCH6Od+UFbhS3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e249fcf802410700001d35c9452c5e86
Files
-
e249fcf802410700001d35c9452c5e86.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE