Behavioral task
behavioral1
Sample
e7d94b31b0962bf7d9090ba2fb20aa30N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e7d94b31b0962bf7d9090ba2fb20aa30N.exe
Resource
win10v2004-20240802-en
General
-
Target
e7d94b31b0962bf7d9090ba2fb20aa30N.exe
-
Size
42KB
-
MD5
e7d94b31b0962bf7d9090ba2fb20aa30
-
SHA1
3b1a7825c4eb0f415c082c02afdb545cd34faa64
-
SHA256
1168ce555c9b482a3e60d68e12880953f5343e7f77489d61ad4dd244a5ae66c0
-
SHA512
4706efe8182b9168542cb5854092578f990eae4bf534bb8a66ff03eda9b3ef04ae36cc462ff6ffc9f3f8382d3510e2a400a6a353f91cd67bcd5a0294b53de4ee
-
SSDEEP
384:FBt7Br5xjL2Kd5AsAoh6n5eaOlIBXDaU7CPKK0TIh6SjeYDTcYDT4cK:V7Blpf/FAK65euBT37CPKK0SjucK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7d94b31b0962bf7d9090ba2fb20aa30N.exe
Files
-
e7d94b31b0962bf7d9090ba2fb20aa30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE