Behavioral task
behavioral1
Sample
e09fa7d9d82896fd2a655b08bcfe697a0b1741d81e2b66340a647da5dacedf8a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e09fa7d9d82896fd2a655b08bcfe697a0b1741d81e2b66340a647da5dacedf8a.exe
Resource
win10v2004-20240419-en
General
-
Target
e09fa7d9d82896fd2a655b08bcfe697a0b1741d81e2b66340a647da5dacedf8a
-
Size
64KB
-
MD5
409f9b6a32c629e0ffd9a664e6ebcaea
-
SHA1
b38526fe39ea2efbec277483e25f33cd4b690a8e
-
SHA256
e09fa7d9d82896fd2a655b08bcfe697a0b1741d81e2b66340a647da5dacedf8a
-
SHA512
74c293a4b4f22b45ce0e2974ea1930852ed89356170d7d07e46a721832eb2c55a5ee221bb06dab67502e232dfa8312eae2e3c4ce49808b6c768bda983b67a052
-
SSDEEP
1536:4LKCxc6ythktVsC9bMn7PoC3txg89FpMhQu9dG0z35:ily6aqOn7ACE89zMfo0z35
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e09fa7d9d82896fd2a655b08bcfe697a0b1741d81e2b66340a647da5dacedf8a
Files
-
e09fa7d9d82896fd2a655b08bcfe697a0b1741d81e2b66340a647da5dacedf8a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE