Behavioral task
behavioral1
Sample
e02992bf96a30e0e69f21b86237f359e6b67ba7602b21d103fdce8d9cf3e2107.exe
Resource
win7-20240704-en
General
-
Target
e02992bf96a30e0e69f21b86237f359e6b67ba7602b21d103fdce8d9cf3e2107
-
Size
3.8MB
-
MD5
5ef7f0308d014daaa78f92cbd50c1cb1
-
SHA1
d7459df37a9bbbc0ebc32ca0a9379f7366db47d8
-
SHA256
e02992bf96a30e0e69f21b86237f359e6b67ba7602b21d103fdce8d9cf3e2107
-
SHA512
050f3bbf3a0fb5a28f81afcb6608baaed8d63c23abe62d0a2fec962f91f0b5bf42ae5a1835d91ebed1d4e4b4385114a12537ba0b4ebb6e20357f433ce135ea43
-
SSDEEP
98304:JoEvSzPr9xOsdk69dvIvO6eKhpLFY0wOoUm1ZwXgiLpTXd+hB:EhxOukbvVLhNFjXEBITX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e02992bf96a30e0e69f21b86237f359e6b67ba7602b21d103fdce8d9cf3e2107
Files
-
e02992bf96a30e0e69f21b86237f359e6b67ba7602b21d103fdce8d9cf3e2107.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE