Behavioral task
behavioral1
Sample
e53dc4ad669f14156f0a1317354600b5b6959f63c8649c1673c2d3314dbb5598.exe
Resource
win7-20240705-en
General
-
Target
e53dc4ad669f14156f0a1317354600b5b6959f63c8649c1673c2d3314dbb5598
-
Size
132KB
-
MD5
1a40d3237bc84367a75392a80e403045
-
SHA1
9559f8dc475629538ecc711e06ad63912721be02
-
SHA256
e53dc4ad669f14156f0a1317354600b5b6959f63c8649c1673c2d3314dbb5598
-
SHA512
7e02d283ba00f7b522f6e1e2a9c5a0739acc5570d7c0a4d6b7c1b33c371fa875d9f95fc35cdc0646e1b0eda7cfc402f58e5a69c18d67d0ff7c1df3f9fa7d0b8a
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TMnRTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJe:fny1onR6W2QZwKS7M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e53dc4ad669f14156f0a1317354600b5b6959f63c8649c1673c2d3314dbb5598
Files
-
e53dc4ad669f14156f0a1317354600b5b6959f63c8649c1673c2d3314dbb5598.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE