Behavioral task
behavioral1
Sample
1e4ebb0e3d5d2d8e0ba30b441f505f1e27cb3c826103fd62e647638f14fa4f0c.exe
Resource
win7-20240903-en
General
-
Target
1e4ebb0e3d5d2d8e0ba30b441f505f1e27cb3c826103fd62e647638f14fa4f0c
-
Size
143KB
-
MD5
496e71f7992e48541e1e8c0372c71583
-
SHA1
70b845a8ce7b7fb444a00e66f1df37cbc58c228f
-
SHA256
1e4ebb0e3d5d2d8e0ba30b441f505f1e27cb3c826103fd62e647638f14fa4f0c
-
SHA512
30e4d5b1563923b9d757fcc0a1609ef3e4edd270a42cca23d2b45cf1b9157e30a26e44079b288de91b282d41cad896ff690ffc7427108eb7028a0522df18c53e
-
SSDEEP
3072:EWNSP/uUdzh5vaBAzmeu2ZN/L/4OhIAsdxn6sM0TZMl9V:7NSnuUdzh5vaBAz5Nr7hIAsdxn6sM0Tc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e4ebb0e3d5d2d8e0ba30b441f505f1e27cb3c826103fd62e647638f14fa4f0c
Files
-
1e4ebb0e3d5d2d8e0ba30b441f505f1e27cb3c826103fd62e647638f14fa4f0c.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE