Behavioral task
behavioral1
Sample
e5debf5340a1aa0284e95fa610ed5a20N.exe
Resource
win7-20240704-en
General
-
Target
e5debf5340a1aa0284e95fa610ed5a20N.exe
-
Size
75KB
-
MD5
e5debf5340a1aa0284e95fa610ed5a20
-
SHA1
71e1166205e78e2632587302c2f4e94b0b2237c3
-
SHA256
0ef5856b9e33095bc217e5bb98167d03d832f0df95e1a843c26a3540a09154ef
-
SHA512
96c30c6f8209de05addf3f7aeda7ac6dcfeba20088e93a75876cc76a7e00e2b0d2009beb59c657555beb126777ba78a5e5926d54dd042eb597ce2d4173f517bc
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCJKr:enaypQSosk+Kr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5debf5340a1aa0284e95fa610ed5a20N.exe
Files
-
e5debf5340a1aa0284e95fa610ed5a20N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE