Behavioral task
behavioral1
Sample
e9bfaed1003be290ecaa2717f8297e10N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e9bfaed1003be290ecaa2717f8297e10N.exe
Resource
win10v2004-20240709-en
General
-
Target
e9bfaed1003be290ecaa2717f8297e10N.exe
-
Size
8.7MB
-
MD5
e9bfaed1003be290ecaa2717f8297e10
-
SHA1
7bdff052422ef22169f70d1cb3a3db7d6ab8628a
-
SHA256
7601a7246723d699a0da063b831f0b124fc7384073b089879d1d7ec431fb3435
-
SHA512
57318624fe982917e3fdd09c2ac0440922e57057bb823a5d1c8fe4296aeadf0f5d33a449b970b47ea8baf1c21420cf16d370ebabfe6b8000aad0d11e2f152e38
-
SSDEEP
98304:Nvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv3CCCCCCCCCCCCCCCCCCCCCCm:dCCCCCCCCCCCCCCCCCCCCCCm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9bfaed1003be290ecaa2717f8297e10N.exe
Files
-
e9bfaed1003be290ecaa2717f8297e10N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE