Behavioral task
behavioral1
Sample
e02c94f2916587b2aecd316ed3797c50.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e02c94f2916587b2aecd316ed3797c50.exe
Resource
win10v2004-20240319-en
General
-
Target
e02c94f2916587b2aecd316ed3797c50.bin
-
Size
46KB
-
MD5
e02c94f2916587b2aecd316ed3797c50
-
SHA1
e786a03b8b1e26edafaa74af8b196c7a93fce088
-
SHA256
9497654613e5738228be45a995898152b8d13137bc5aeaba12ae203ddeefb8b7
-
SHA512
e511b86a32c74d5946a33a5ad257ebb138adddccd46eb3f87543f4d1737ccb8cc783cb393a83a5435b0cb9f7396792ab2cdb88555269418bf82a8c58b5dc609a
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFaaa3IMZZ3RkSukI:SKcR4mjD9r823FSFnuJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e02c94f2916587b2aecd316ed3797c50.bin
Files
-
e02c94f2916587b2aecd316ed3797c50.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE