Behavioral task
behavioral1
Sample
e30393e835acd5910c9d7db1a786fcd5e18ec27cc600feb2b7f94564e4e0188d.exe
Resource
win7-20240705-en
General
-
Target
e30393e835acd5910c9d7db1a786fcd5e18ec27cc600feb2b7f94564e4e0188d
-
Size
145KB
-
MD5
39e315ba3f323339014c28c8f2919555
-
SHA1
c9052df2e5e9bca592a0f75c105cb61572897c6e
-
SHA256
e30393e835acd5910c9d7db1a786fcd5e18ec27cc600feb2b7f94564e4e0188d
-
SHA512
d2f31cffaac18b966df9df31e26e4112f894d2de7ea5f4faafd3f696f5056dc7552c59aa669e38e34773908b034e3e95de8f5d84f8e8b1f698c92cc5e077cb8d
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TSwjoJ7P81AuAfPS05PnDJtYfuKtIAF6cSVjVjXklfQafRLuHl:fny1ewU7PgUXSAjZIInlxragr/Fgwj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e30393e835acd5910c9d7db1a786fcd5e18ec27cc600feb2b7f94564e4e0188d
Files
-
e30393e835acd5910c9d7db1a786fcd5e18ec27cc600feb2b7f94564e4e0188d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE