Behavioral task
behavioral1
Sample
e9b15b20632c0bc7e12cf25a5f090f6ddab72e307c1f08b7eeccea1ff5d0ac5b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e9b15b20632c0bc7e12cf25a5f090f6ddab72e307c1f08b7eeccea1ff5d0ac5b.exe
Resource
win10v2004-20241007-en
General
-
Target
e9b15b20632c0bc7e12cf25a5f090f6ddab72e307c1f08b7eeccea1ff5d0ac5b
-
Size
3.3MB
-
MD5
8814f6676f299c514df1c2b855e7f4cc
-
SHA1
5ac956b893e336e7bc53b4eb0aa5c44f5efbc53a
-
SHA256
e9b15b20632c0bc7e12cf25a5f090f6ddab72e307c1f08b7eeccea1ff5d0ac5b
-
SHA512
4f60cc36dd5f9bcc31d31d68306fcbc506c7fb9e20cb94f20a6570b2deff5615a0043f56644754a51bc2acce368c9955dd1c37fb32803d88f950e3ca7436c0d1
-
SSDEEP
49152:9jpCiSC7VLqrZu1xBwnIYl5+792VwknqotEFMkY+UBMoEnRqlrMz0FBcbZAjxnMj:9Or6PE+79edqj27+UBxcRqlr1BSuMj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9b15b20632c0bc7e12cf25a5f090f6ddab72e307c1f08b7eeccea1ff5d0ac5b
Files
-
e9b15b20632c0bc7e12cf25a5f090f6ddab72e307c1f08b7eeccea1ff5d0ac5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE