Behavioral task
behavioral1
Sample
e79b94b5fbd3381150f2bd8780fb6eea0bc564767f2335f2ae50103df4643c1f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e79b94b5fbd3381150f2bd8780fb6eea0bc564767f2335f2ae50103df4643c1f.exe
Resource
win10v2004-20240508-en
General
-
Target
e79b94b5fbd3381150f2bd8780fb6eea0bc564767f2335f2ae50103df4643c1f
-
Size
2.7MB
-
MD5
5a2a070ed9245b453d2e4ccc19e42ad7
-
SHA1
d023d1ccf7c07c59323ec0c526ee9d53e508aa0c
-
SHA256
e79b94b5fbd3381150f2bd8780fb6eea0bc564767f2335f2ae50103df4643c1f
-
SHA512
264e01fc533b1605ebe9d8b40b4c3ca4c47c073fc1701b3884968f60ff3d3f8e89fe700f40ecf546fb7227d284f36d66d1bdbc270f2eb15fc851028af242c3cd
-
SSDEEP
49152:y3KtIfoHUyK+oESzKPIscq+AcUXEezBRWS9G9Vq5:y+Ko0r+oESzKXcccRKBRvG9Vq5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e79b94b5fbd3381150f2bd8780fb6eea0bc564767f2335f2ae50103df4643c1f
Files
-
e79b94b5fbd3381150f2bd8780fb6eea0bc564767f2335f2ae50103df4643c1f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE