Behavioral task
behavioral1
Sample
1e0ea2ba16546183a3b94942b0d2dbbc9500bfc034d6e221413372facf383533N.exe
Resource
win7-20240903-en
General
-
Target
1e0ea2ba16546183a3b94942b0d2dbbc9500bfc034d6e221413372facf383533N.exe
-
Size
89KB
-
MD5
e007bc0b543a615b26b795d4e38a9860
-
SHA1
3b9b1dd3a2092244245f178ad289e2a4b12683d8
-
SHA256
1e0ea2ba16546183a3b94942b0d2dbbc9500bfc034d6e221413372facf383533
-
SHA512
6cb14d940a580a17844cdd86c9467da89109f2fbb5f1338b03c58ff1dc2601c704be6ef5c3bc0cd8816f114ed4338b848098d2280bf86b077a5d16543bf6e24d
-
SSDEEP
1536:I1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox7a:c+4MJIkLZJNAQ9Jo9a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e0ea2ba16546183a3b94942b0d2dbbc9500bfc034d6e221413372facf383533N.exe
Files
-
1e0ea2ba16546183a3b94942b0d2dbbc9500bfc034d6e221413372facf383533N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE