Behavioral task
behavioral1
Sample
e7d7741a2c11a9bc3dd0e8427a7aba6cb096eefdbb9fab6f294ebac31d5491a3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e7d7741a2c11a9bc3dd0e8427a7aba6cb096eefdbb9fab6f294ebac31d5491a3.exe
Resource
win10v2004-20240426-en
General
-
Target
e7d7741a2c11a9bc3dd0e8427a7aba6cb096eefdbb9fab6f294ebac31d5491a3
-
Size
188KB
-
MD5
3baf526fbd56d6d0ab792c1947de23f0
-
SHA1
0e944450158234714aae193267ea86ed3daa2d0c
-
SHA256
e7d7741a2c11a9bc3dd0e8427a7aba6cb096eefdbb9fab6f294ebac31d5491a3
-
SHA512
dc75a8dac8d1d932b1b792d919d8dbf266bcc2390c9befe88f51cefc7cd78d4c25b602e10534c64de361c7cd3888c57bf5989095ca22a54e637b15098c094193
-
SSDEEP
3072:1RZw50WbEawNwmD2+KfuAzklEYREPR4zb4diMy5E8g:1RZw50CwezVfJklMPR4zb4diE8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7d7741a2c11a9bc3dd0e8427a7aba6cb096eefdbb9fab6f294ebac31d5491a3
Files
-
e7d7741a2c11a9bc3dd0e8427a7aba6cb096eefdbb9fab6f294ebac31d5491a3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE