Behavioral task
behavioral1
Sample
e4943b4e866b48d24cbe48316656eac03671c3bc62a87c50edd501df2959dbb6N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e4943b4e866b48d24cbe48316656eac03671c3bc62a87c50edd501df2959dbb6N.exe
Resource
win10v2004-20241007-en
General
-
Target
e4943b4e866b48d24cbe48316656eac03671c3bc62a87c50edd501df2959dbb6N
-
Size
814KB
-
MD5
d15daf3d075bc40c0e27a9ede8963e70
-
SHA1
07919a89954b66e12975fbf151359d6d56b3e3c5
-
SHA256
e4943b4e866b48d24cbe48316656eac03671c3bc62a87c50edd501df2959dbb6
-
SHA512
df0b0e49ff175c82d0ccbfd40d411a9225bb94cee861d3d22a107cb2360a4dad7273ca1efd469135a2d2827610b78f599cd16e211bf31678d75ce9f0d8e787ae
-
SSDEEP
24576:v6Zv2ivhBVnFys7xP86LkRCQsa6YBUJ9ghPjaFl:vE2ivhQs7dLkDsLvJ9uLaFl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4943b4e866b48d24cbe48316656eac03671c3bc62a87c50edd501df2959dbb6N
Files
-
e4943b4e866b48d24cbe48316656eac03671c3bc62a87c50edd501df2959dbb6N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE