Behavioral task
behavioral1
Sample
7c4d0a744dc88d49b8e0ff6b93c9e2ad53b920be4163f95c1aa08caec36b1601.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7c4d0a744dc88d49b8e0ff6b93c9e2ad53b920be4163f95c1aa08caec36b1601.exe
Resource
win10v2004-20230915-en
General
-
Target
7c4d0a744dc88d49b8e0ff6b93c9e2ad53b920be4163f95c1aa08caec36b1601
-
Size
292KB
-
MD5
aa2fd560556dbd3f271e00cf6e0d5ba5
-
SHA1
a766760f40cc76aca4f4b2436e980ea738a480c6
-
SHA256
7c4d0a744dc88d49b8e0ff6b93c9e2ad53b920be4163f95c1aa08caec36b1601
-
SHA512
594811890a2b201e832c8e0fe7b696a2abcb363aeaa1f82387a87d00b300d25e032b7cfb9c97e9b3faaf805ab161c8cb31d01802f2afae3108bd23b36ea035d0
-
SSDEEP
3072:+ozWl73HgR4ISEb4kxdnqfPQSiOfd9uRN2I+z23HgR4ISEb4kQdnqfPQSiufd8kC:+uCTAR4ZQKTufIIAR40Qqakf6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c4d0a744dc88d49b8e0ff6b93c9e2ad53b920be4163f95c1aa08caec36b1601
Files
-
7c4d0a744dc88d49b8e0ff6b93c9e2ad53b920be4163f95c1aa08caec36b1601.exe windows:4 windows x86
b305bcdde4921e7da92d6e9d7e414d07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
advapi32
RegEnumKeyW
comctl32
ord17
gdi32
SetBkMode
ole32
CoTaskMemFree
shell32
ShellExecuteW
user32
GetDC
version
VerQueryValueW
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nydi Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ