Behavioral task
behavioral1
Sample
e2553ac081b2537ae231d4fc91d8d67aa40e383db451b562fe5594110cb1c851N.exe
Resource
win7-20240903-en
General
-
Target
e2553ac081b2537ae231d4fc91d8d67aa40e383db451b562fe5594110cb1c851N
-
Size
1.6MB
-
MD5
45552a62d828e64df85c40b769ca36f0
-
SHA1
68c2d485708a92fe973d0f8520126f5a8c98b35a
-
SHA256
e2553ac081b2537ae231d4fc91d8d67aa40e383db451b562fe5594110cb1c851
-
SHA512
dbe55053e8b66f8721e67bcd396238e5471d0bc8c37bdb9a6e9d5bcacfcc97e62f1010b87050361411f6fc3a213a5101b3c3e6fe29f996e00632d55eb92c9aee
-
SSDEEP
24576:fMrwS2mlYUSFxKQHKV1pOz/LpyTRk7SM:fM0S2mYrKQHKVTOzQT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2553ac081b2537ae231d4fc91d8d67aa40e383db451b562fe5594110cb1c851N
Files
-
e2553ac081b2537ae231d4fc91d8d67aa40e383db451b562fe5594110cb1c851N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE