Behavioral task
behavioral1
Sample
e81066d547808e8818e381ef62953368f350cb5d13004d979845f2ae2ae89da2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e81066d547808e8818e381ef62953368f350cb5d13004d979845f2ae2ae89da2.exe
Resource
win10v2004-20240704-en
General
-
Target
e81066d547808e8818e381ef62953368f350cb5d13004d979845f2ae2ae89da2
-
Size
187KB
-
MD5
58a855434d5ac563b88ed543e9c34b1f
-
SHA1
020fd3a97e26d84862f0e481401dd052f8a1634f
-
SHA256
e81066d547808e8818e381ef62953368f350cb5d13004d979845f2ae2ae89da2
-
SHA512
aceab4d6e74181679cdabda3f861566e61dc628a3db02da038ded1084412ae922873c85e339d1eae8c107f8ea45bd07891916cf2634548e7b14f87af88f8c22c
-
SSDEEP
3072:mr+FutRj/n1Y4p4gMRIO8uwBKEQ+cULflQnr:wRj/9nGx+cUC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e81066d547808e8818e381ef62953368f350cb5d13004d979845f2ae2ae89da2
Files
-
e81066d547808e8818e381ef62953368f350cb5d13004d979845f2ae2ae89da2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE