Behavioral task
behavioral1
Sample
e986a2196be6f81c33a9a9e17f7330e9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e986a2196be6f81c33a9a9e17f7330e9.exe
Resource
win10v2004-20240426-en
General
-
Target
e986a2196be6f81c33a9a9e17f7330e9.exe
-
Size
1.4MB
-
MD5
e986a2196be6f81c33a9a9e17f7330e9
-
SHA1
edfc511a7b469919e7c0524037c5cd0c74d3d040
-
SHA256
294f17d4db4e10367ffda48be578c00cd3f0cbd67a2543eb6678af258965f53b
-
SHA512
b2e743f075ed45d65fcaa2e9077417213ec67f83a0195772701d56895ea36a2d3965482de7672cd8ce17fcc1d092add49ec3bf845b75cca0244310db28af3c28
-
SSDEEP
24576:Z9IaaFsr1dVvruGUo9a+ApF6TlAn+AGEpW5Fwt2hZNAp7aNCQ36q/:waaFw1dVvr/U2a+ApwAnxGEpzUqUN5K4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e986a2196be6f81c33a9a9e17f7330e9.exe
Files
-
e986a2196be6f81c33a9a9e17f7330e9.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ