Behavioral task
behavioral1
Sample
e930596b4f06dc16c17d9adf6b5a6460N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e930596b4f06dc16c17d9adf6b5a6460N.exe
Resource
win10v2004-20240802-en
General
-
Target
e930596b4f06dc16c17d9adf6b5a6460N.exe
-
Size
49KB
-
MD5
e930596b4f06dc16c17d9adf6b5a6460
-
SHA1
5a9c6dbeb9b498e520ee5ad162da628dcdc6e714
-
SHA256
f6a8286f344064b982c39c390852ab47171148720eef9cded64b962d63e8371c
-
SHA512
e51495055c53e1fd71ce7313972a81c828d1a4db691c6792319325f7b8e60fa4c69fe92703d5f2452357f431f2ffb69af8ada631d66d3f0b32583ae60a6c8720
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9QP9P/:V7Zf/FAxTWoJJ7Ty
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e930596b4f06dc16c17d9adf6b5a6460N.exe
Files
-
e930596b4f06dc16c17d9adf6b5a6460N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE