Behavioral task
behavioral1
Sample
e792aafc27736d9c57ca08224c5b6321d2ffe0eefa53b6c2406d424c1d43f446.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e792aafc27736d9c57ca08224c5b6321d2ffe0eefa53b6c2406d424c1d43f446.exe
Resource
win10v2004-20240802-en
General
-
Target
e792aafc27736d9c57ca08224c5b6321d2ffe0eefa53b6c2406d424c1d43f446
-
Size
163KB
-
MD5
a6d2009eaf7140e792927c590b77bc62
-
SHA1
f4378af5d651c7ea320e24467228b2852c48cb42
-
SHA256
e792aafc27736d9c57ca08224c5b6321d2ffe0eefa53b6c2406d424c1d43f446
-
SHA512
7debd03ade0629083a7afe00b215e4546535396e8008aeeca050e5f558963862f4f8f33bacf64230c19a38c493bc7d3d45141eb346f36a5d0a0e1c701bae74dc
-
SSDEEP
1536:fWwa6OYkIgzwOYFu/vWInvqTgiV6ZokAcgKwu2OcjUpkWb2TTgKwuu:+z6ODIn3u//vS4oE7t2OcjWJu7tu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e792aafc27736d9c57ca08224c5b6321d2ffe0eefa53b6c2406d424c1d43f446
Files
-
e792aafc27736d9c57ca08224c5b6321d2ffe0eefa53b6c2406d424c1d43f446.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 72KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE