Behavioral task
behavioral1
Sample
e2de59b46fd030bfd4733d1a7d0d5e65c905922b130b0f7677dcca49af9be8faN.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e2de59b46fd030bfd4733d1a7d0d5e65c905922b130b0f7677dcca49af9be8faN.exe
Resource
win10v2004-20240802-en
General
-
Target
e2de59b46fd030bfd4733d1a7d0d5e65c905922b130b0f7677dcca49af9be8faN
-
Size
91KB
-
MD5
5e078eb94b5445a02d2442613f6e5630
-
SHA1
982733fa7abbadd947088a18a20958d95467fdcc
-
SHA256
e2de59b46fd030bfd4733d1a7d0d5e65c905922b130b0f7677dcca49af9be8fa
-
SHA512
ad8b01632ccafbef756343d9fb423f1eafa4f83af853050925fab5eee94d2e111f96ef8f33bf0bf7198dfae29a0334c6dc0e12c9ee873b1000c654b3c25546ed
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTkb/bN9e9R:fnyiQSo7ZgrJ9e9R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2de59b46fd030bfd4733d1a7d0d5e65c905922b130b0f7677dcca49af9be8faN
Files
-
e2de59b46fd030bfd4733d1a7d0d5e65c905922b130b0f7677dcca49af9be8faN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE