Behavioral task
behavioral1
Sample
e44a9d7916b42e0ad58a6102f289f690N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e44a9d7916b42e0ad58a6102f289f690N.exe
Resource
win10v2004-20240709-en
General
-
Target
e44a9d7916b42e0ad58a6102f289f690N.exe
-
Size
1.8MB
-
MD5
e44a9d7916b42e0ad58a6102f289f690
-
SHA1
1b705938b81962020aa848380a90ee5a52d9c642
-
SHA256
3f37206626d63edf5e23829bce65891026950cb4ece484acb816cd195992158c
-
SHA512
20d75da67ebb67c1029d72637c7a60402c071bedf1391c540a46c31e688ea8f4a9ab83d914d40bf5c56423c3531cff4b8c329e713953370c1a28f41b58fd4333
-
SSDEEP
49152:wNMqQ0kwonLVkZep9nWrPWwONrRoODiGgDWAg2CPaSAnYvJW3BTSXff6YNQVWIPz:wiqQ0kwonLVkZep9nWrPWwONrRoODiGw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e44a9d7916b42e0ad58a6102f289f690N.exe
Files
-
e44a9d7916b42e0ad58a6102f289f690N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE