DriverProc
Behavioral task
behavioral1
Sample
e62b144551305c8b1bd31d8e5e0dfcae89ac0a76dc930ceb3613bf667e39afe8.dll
Resource
win7-20241010-en
General
-
Target
e62b144551305c8b1bd31d8e5e0dfcae89ac0a76dc930ceb3613bf667e39afe8.exe
-
Size
71KB
-
MD5
2fcde9e71be009b9b3dd50cdc87f0b5c
-
SHA1
7964584bdacdd8e81898cbb5f28ad1c0af2332f4
-
SHA256
e62b144551305c8b1bd31d8e5e0dfcae89ac0a76dc930ceb3613bf667e39afe8
-
SHA512
16a2e1e1f304facc97e2840a73a13d717ff77c52d8012292c8023626fe0f3378dbd99d06cc499e367e0c0335f857b34668aa924996149e0cecf5f2e7bea60b92
-
SSDEEP
1536:eQUh5VR9unGw60fnHkucCP8DB59ROSqZ+FH5LTMrZd7+SY6S46c:KVR9uGB0ES0l5lW+FH5/M1d7+M1z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e62b144551305c8b1bd31d8e5e0dfcae89ac0a76dc930ceb3613bf667e39afe8.exe
Files
-
e62b144551305c8b1bd31d8e5e0dfcae89ac0a76dc930ceb3613bf667e39afe8.exe.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE