Behavioral task
behavioral1
Sample
e49bfcbb5acebed0b933b3a664cbf16d9bf01c9b07b6b7fb6b84c03c4319a2b7.exe
Resource
win7-20240903-en
General
-
Target
e49bfcbb5acebed0b933b3a664cbf16d9bf01c9b07b6b7fb6b84c03c4319a2b7
-
Size
19KB
-
MD5
7c76784558b48b82d0d59a3a366bce22
-
SHA1
657d7dfefc8b3a6c8a205ad81c35ec835dc77b4f
-
SHA256
e49bfcbb5acebed0b933b3a664cbf16d9bf01c9b07b6b7fb6b84c03c4319a2b7
-
SHA512
fb3c621cf6d3c6a92d3420e819264b1254c40f8c8e37db1bfc8875b24f5b50e0c3813a6a5761fd30090256ecf6d82223bdc619126a50dddb39aba14590fec0dc
-
SSDEEP
384:Iuhw2vj7g0Eb9Vp0KuekPI/xjtvSywYqaNJawcudoD7U1PEPmPgP5Kt9:3N7M0E58KQP4kyPnbcuyD7U1PEPmPgPq
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e49bfcbb5acebed0b933b3a664cbf16d9bf01c9b07b6b7fb6b84c03c4319a2b7
Files
-
e49bfcbb5acebed0b933b3a664cbf16d9bf01c9b07b6b7fb6b84c03c4319a2b7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE