Behavioral task
behavioral1
Sample
e0bfa00566ecfb7c6cf52076d025e430N.exe
Resource
win7-20240704-en
General
-
Target
e0bfa00566ecfb7c6cf52076d025e430N.exe
-
Size
113KB
-
MD5
e0bfa00566ecfb7c6cf52076d025e430
-
SHA1
fcbc00a1bdb8a324372a2ed513fbf65559418fbb
-
SHA256
15dabadb4bf5e57b5ee7b52f6599fcd528da3046259950f4d889aca3e83133fc
-
SHA512
6ff9a51c994fed83ebdea8b71a72e5ca23902179e9f5d4748829f860750afd05e172043a92acee96ab5c8dc6459ecf7a5215ae722a0ae56ae3226034859eaacb
-
SSDEEP
1536:CTW7JJ7T7jkKCVkdTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJP:h3jkKCed6W2QZwKS7J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e0bfa00566ecfb7c6cf52076d025e430N.exe unpack001/out.upx
Files
-
e0bfa00566ecfb7c6cf52076d025e430N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ