Behavioral task
behavioral1
Sample
7ec14a0eebca2e97cb84e37ad20c21b3d136d1562fe01fbac53aaac5f32ce390.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7ec14a0eebca2e97cb84e37ad20c21b3d136d1562fe01fbac53aaac5f32ce390.exe
Resource
win10v2004-20230220-en
General
-
Target
7ec14a0eebca2e97cb84e37ad20c21b3d136d1562fe01fbac53aaac5f32ce390
-
Size
3.3MB
-
MD5
b416c8a398e6b7cebd0ff89b974fe264
-
SHA1
70da8736a2857e181e8b897f0656791201c22cfe
-
SHA256
7ec14a0eebca2e97cb84e37ad20c21b3d136d1562fe01fbac53aaac5f32ce390
-
SHA512
976e6fd0851adb855d451b2cf4fd2e7901037956a7805c1bd7d5e1e75788694b846f7e7b8ac14e5e81e83d37f33fe663db43f3bc676565a89a25baf1d6de4719
-
SSDEEP
49152:lgFhwxj9pbkwt4Hku5UifjyInaIMRutaoLUq:999pIS4EeU4mInxMYtV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ec14a0eebca2e97cb84e37ad20c21b3d136d1562fe01fbac53aaac5f32ce390
Files
-
7ec14a0eebca2e97cb84e37ad20c21b3d136d1562fe01fbac53aaac5f32ce390.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE