Behavioral task
behavioral1
Sample
e4fc3353e9bdd0111ce5b906be5eac0d7f75a9e3f1ecd9a8b16685b45d9f8c61.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e4fc3353e9bdd0111ce5b906be5eac0d7f75a9e3f1ecd9a8b16685b45d9f8c61.exe
Resource
win10v2004-20240508-en
General
-
Target
e4fc3353e9bdd0111ce5b906be5eac0d7f75a9e3f1ecd9a8b16685b45d9f8c61
-
Size
2.5MB
-
MD5
c33f553b0eac316221eb9e23e223de54
-
SHA1
665ba178875c7aa131108358479cca35d7bf9544
-
SHA256
e4fc3353e9bdd0111ce5b906be5eac0d7f75a9e3f1ecd9a8b16685b45d9f8c61
-
SHA512
b57c9c05b6a453163a953e9e1355cc16f3caecfa806f4c9bcf1d3c3753a653695955dee769ef19a451bf07e7272a8a896b9e2eee270f6b593b25fea49ff1a923
-
SSDEEP
49152:Gq5MJJIrbqWH9loC9pgGpoX9flHCizytx50HTSJiFOdC0+oYmJzye+XVmMjkt:GLaF4gzpoptfmeTS7+oLJzye0mukt
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e4fc3353e9bdd0111ce5b906be5eac0d7f75a9e3f1ecd9a8b16685b45d9f8c61
Files
-
e4fc3353e9bdd0111ce5b906be5eac0d7f75a9e3f1ecd9a8b16685b45d9f8c61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE