Behavioral task
behavioral1
Sample
e5db2392fbb549c005950dfa6e941820N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e5db2392fbb549c005950dfa6e941820N.exe
Resource
win10v2004-20240802-en
General
-
Target
e5db2392fbb549c005950dfa6e941820N
-
Size
5.7MB
-
MD5
e5db2392fbb549c005950dfa6e941820
-
SHA1
3b8bb1bbebe4f99a1c371c10fbf848cefcb0c427
-
SHA256
22634df724c4b96e2bbcb657ff2933885bcaab58b8e62f5a9f897777dcd4cc61
-
SHA512
24c36c324ed575f925c919a1ebf3e3556b72d740575026c28d453db0bf1493bd790822911fda0455b0a8c21c06983fa8c9835fabccbd2b62f53bfb707d1db26e
-
SSDEEP
98304:thq5me46msRqs7N/2Cc+ZUYG8blA5A8SbbCsqLoNYoghW5B3fecmQY1ikrnuvR/r:thLecaqANjZu5A8SbbCHL8k43feHQYM/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5db2392fbb549c005950dfa6e941820N
Files
-
e5db2392fbb549c005950dfa6e941820N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE