Behavioral task
behavioral1
Sample
e2b6d3ef6f5ba2853b41d3c224cf41863a9c56ea416015e6f949c31c53804937N.exe
Resource
win7-20240903-en
General
-
Target
e2b6d3ef6f5ba2853b41d3c224cf41863a9c56ea416015e6f949c31c53804937N
-
Size
149KB
-
MD5
2a28e2d58d371b157b1769d4e5e66ff0
-
SHA1
8a90530a8a82574219d623a41040bbd4d1c81667
-
SHA256
e2b6d3ef6f5ba2853b41d3c224cf41863a9c56ea416015e6f949c31c53804937
-
SHA512
200164a7aaefd007d9a1cf351ba2fa5bf11330e0d1428e73d3b0e6fac9de4fd1a0fdfaeafd5b9bc9dad71fe9a4505592893b1eee8c6111df95b8014c63c6d11e
-
SSDEEP
1536:03aacznhtqkUla/NGVcJ/gAqcX0JMseuiGSeNVvDi0tMuUJJny3GM+9m:taCqc9rqzMseNoVv9EJFnM8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2b6d3ef6f5ba2853b41d3c224cf41863a9c56ea416015e6f949c31c53804937N
Files
-
e2b6d3ef6f5ba2853b41d3c224cf41863a9c56ea416015e6f949c31c53804937N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE