Behavioral task
behavioral1
Sample
e612600d1048caa9387747ce102b85d0N.exe
Resource
win7-20240708-en
General
-
Target
e612600d1048caa9387747ce102b85d0N.exe
-
Size
69KB
-
MD5
e612600d1048caa9387747ce102b85d0
-
SHA1
2a1fed022e56e627989f60a0c2360585e2882731
-
SHA256
5475e859e3d87f0daec72d7ccabdd4efb21204cca8a409b31807b4ff6c846fd8
-
SHA512
8d719746d22805dcfe6b037b5972bf71d08149c09fd5dc1b41b7e30b7248d9d7ca74cebc6b15f7e9d616835e32796d7471d8a535dd8446a93b789d9d190b9aa4
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw/x/fxRfoooVOtiJfooVOtiJ4P9P2g:V7Zf/FAxTWOx/fxRfQZ0Oc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e612600d1048caa9387747ce102b85d0N.exe
Files
-
e612600d1048caa9387747ce102b85d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE