Behavioral task
behavioral1
Sample
e97a635b0e63b15d4c318bf55a031ab0c3b061b501f59c638a6a4506022df707.exe
Resource
win7-20240221-en
General
-
Target
e97a635b0e63b15d4c318bf55a031ab0c3b061b501f59c638a6a4506022df707
-
Size
350KB
-
MD5
3e7776a7e52ae111cd0a892fac36af24
-
SHA1
660cade17ea50f8e64f6b0ca367af6b1322bd711
-
SHA256
e97a635b0e63b15d4c318bf55a031ab0c3b061b501f59c638a6a4506022df707
-
SHA512
b133c2431df55715a93affc9b4049a62085a25a608ea613a5974c2b37ebe40d0974c854265b13595ef273ceb4cbe1f4a66a4854b5904a6b080bdfabb768c7edf
-
SSDEEP
6144:bcm4FmowdHoSgWrXD486jCpoAhlq1mEjBqLyOSlhNFF23x:h4wFHoSgWj168w1VjsyvhNFF2h
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e97a635b0e63b15d4c318bf55a031ab0c3b061b501f59c638a6a4506022df707
Files
-
e97a635b0e63b15d4c318bf55a031ab0c3b061b501f59c638a6a4506022df707.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE