Behavioral task
behavioral1
Sample
e9840fe8c2a0870bb847c0c4a3411595eb831c5f3fdc04d5d9ad35e719e8c4e5N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9840fe8c2a0870bb847c0c4a3411595eb831c5f3fdc04d5d9ad35e719e8c4e5N.exe
Resource
win10v2004-20240802-en
General
-
Target
e9840fe8c2a0870bb847c0c4a3411595eb831c5f3fdc04d5d9ad35e719e8c4e5N
-
Size
865KB
-
MD5
e6795ab6634a9380617b6b60ba926190
-
SHA1
91a1b7893a99029531f90b48a79e1f58fbd796e9
-
SHA256
e9840fe8c2a0870bb847c0c4a3411595eb831c5f3fdc04d5d9ad35e719e8c4e5
-
SHA512
4df46ab9c3e4acc0539cde585894867f97d4a694cb7831ea722fc25d50eaeef7222a431b8ed2349cc0fab9cc8b5e751a2d66887a302a20cad7fd1c247aefd0cf
-
SSDEEP
24576:toIvlpF8HlfcSmyG2Q/UIP7bPwsWcD+F:NlpFkl9mJtUeWcDY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9840fe8c2a0870bb847c0c4a3411595eb831c5f3fdc04d5d9ad35e719e8c4e5N
Files
-
e9840fe8c2a0870bb847c0c4a3411595eb831c5f3fdc04d5d9ad35e719e8c4e5N.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 847KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE