Behavioral task
behavioral1
Sample
eaa0e52d3cc99c06ec123a0c3a260773fe900a796e2db2efe45778a5da3848bcN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaa0e52d3cc99c06ec123a0c3a260773fe900a796e2db2efe45778a5da3848bcN.exe
Resource
win10v2004-20240802-en
General
-
Target
eaa0e52d3cc99c06ec123a0c3a260773fe900a796e2db2efe45778a5da3848bcN
-
Size
679KB
-
MD5
8f1b3d4227f6b274f6e7bef2d34b4540
-
SHA1
54a700d18445c2c3f8cc79863a00dd148dd74adf
-
SHA256
eaa0e52d3cc99c06ec123a0c3a260773fe900a796e2db2efe45778a5da3848bc
-
SHA512
9a624261fa5c64ebcd22807e7e2d571e27a4c3256a58031ec42be361c85338af0b05deed19ce2f14a63588e397d2d042ca63fc4f23bbbd915cebc7c22500784f
-
SSDEEP
12288:lCuW+5P94e2ZJr85tFhDo2SwILq+n0trsXp/lzcJlFz39gdqdDFWYupymPgK2Sb2:guW+H4e2ZJrK6xLq+nwrstdcXFz39FuY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaa0e52d3cc99c06ec123a0c3a260773fe900a796e2db2efe45778a5da3848bcN
Files
-
eaa0e52d3cc99c06ec123a0c3a260773fe900a796e2db2efe45778a5da3848bcN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 623KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE