Behavioral task
behavioral1
Sample
e49ac7a179d7d2edb448913c2af1cbe0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e49ac7a179d7d2edb448913c2af1cbe0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e49ac7a179d7d2edb448913c2af1cbe0N.exe
-
Size
63KB
-
MD5
e49ac7a179d7d2edb448913c2af1cbe0
-
SHA1
dd4677837ecd428eba242a7f21b1e035a8a09053
-
SHA256
40a005943e26eb0e4dca65058f61a01018ed44ecf382e32b6103ee038f527651
-
SHA512
ecb6755ed404f17e18006d95bc4e76c1f61e6cd5e914000cf3825f103b3b8b48478a38d0be461be67ea611ba405ee1fd270920c82eb5b09ef6138b73a155e397
-
SSDEEP
768:jSxam3Usjr3REXXr8yxFChMp7v9DLKrzCnbcuyD7UVeQI5noc2cAvcV4RP0U+t6:jRsjdEIUFC2p79OCnouy8VDUAG4RsfU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e49ac7a179d7d2edb448913c2af1cbe0N.exe
Files
-
e49ac7a179d7d2edb448913c2af1cbe0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE