Behavioral task
behavioral1
Sample
e961ba2625ceebb363ec02ebd7979890d2d9ba03f5ee569ed97a6f696c24d0b6N.exe
Resource
win7-20240708-en
General
-
Target
e961ba2625ceebb363ec02ebd7979890d2d9ba03f5ee569ed97a6f696c24d0b6N
-
Size
365KB
-
MD5
6ef8b118a7a81710912d78a1678086d0
-
SHA1
8e19f076c03c3e1716b519fe8344363e1cda703a
-
SHA256
e961ba2625ceebb363ec02ebd7979890d2d9ba03f5ee569ed97a6f696c24d0b6
-
SHA512
fe85c0b4352fdd00fcde99691b87442cdfab1862e04b1a906ddaaae60e5d31fcd2d84519a2effb6791d7be9143b58dc170b25ceeba219badf8f5a7bd3e90180b
-
SSDEEP
6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE8M:/4wFHoSQuxy3rTXIM18M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e961ba2625ceebb363ec02ebd7979890d2d9ba03f5ee569ed97a6f696c24d0b6N
Files
-
e961ba2625ceebb363ec02ebd7979890d2d9ba03f5ee569ed97a6f696c24d0b6N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE