Static task
static1
Behavioral task
behavioral1
Sample
e21bd694f43eae45c03293b031050ed02ce53bad70ae8873d1d9a05eb5951198.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e21bd694f43eae45c03293b031050ed02ce53bad70ae8873d1d9a05eb5951198.exe
Resource
win10v2004-20240508-en
General
-
Target
e21bd694f43eae45c03293b031050ed02ce53bad70ae8873d1d9a05eb5951198
-
Size
718KB
-
MD5
d99b18fe2d6a7aa77e1cdf5cdc5e30ea
-
SHA1
a5cc2d2067c3a03450e1bbf4310ef3618bee025a
-
SHA256
e21bd694f43eae45c03293b031050ed02ce53bad70ae8873d1d9a05eb5951198
-
SHA512
ebd9b0a52417e758029f042ca1f2ad44ecf552ca0c07f9c7fc645a794127936de7ab71671e2aba8b4757935c7acc59df1e392c2b48867c915888983b9101e3ef
-
SSDEEP
12288:9n8yN0Mr8qj63hgD1Zib/Q0dYZ57d/0paVRX71eXwA47NVB:FPuQ63ig/ryZ5BrLXxwU7NVB
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e21bd694f43eae45c03293b031050ed02ce53bad70ae8873d1d9a05eb5951198
Files
-
e21bd694f43eae45c03293b031050ed02ce53bad70ae8873d1d9a05eb5951198.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE