Behavioral task
behavioral1
Sample
e3bd5734871f2e068ba62d0f79b47dd0N.exe
Resource
win7-20240705-en
General
-
Target
e3bd5734871f2e068ba62d0f79b47dd0N.exe
-
Size
7.8MB
-
MD5
e3bd5734871f2e068ba62d0f79b47dd0
-
SHA1
2474524de29c68a8fc27237af48a38650797bf12
-
SHA256
cd6fe6462bb1015afbe4cdaf45104a23be1096d5d6169136effb30ae18ab7f0a
-
SHA512
5f177df2cd65b44235a2acecae1a901f81c86b1b3ef27865e066164ec59ade2fcd87b5c6c0db8e453c0087b623bec31e8aee78bf476795113ddceecbcb36b9fc
-
SSDEEP
98304:dE35EJE35EKE35E5E35EYE35EjE35E9E35EyE35EpE35E4E35EmE35EOE35EUE3v:X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3bd5734871f2e068ba62d0f79b47dd0N.exe
Files
-
e3bd5734871f2e068ba62d0f79b47dd0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bldvar Size: 38KB - Virtual size: 196KB
BSS Size: 12KB - Virtual size: 192KB