Behavioral task
behavioral1
Sample
700bccff4877ed3699a5f46b56340ed7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
700bccff4877ed3699a5f46b56340ed7.exe
Resource
win10v2004-20231222-en
General
-
Target
700bccff4877ed3699a5f46b56340ed7
-
Size
2.7MB
-
MD5
700bccff4877ed3699a5f46b56340ed7
-
SHA1
ff4ebe624148108981ccac5556af246613e8384e
-
SHA256
8a84ae7d3dc6b7eb498055809e0b4da235a62251dc87fc250bf99ac7b8a50371
-
SHA512
0298259ec8046d7687cc82ca05809088039c966fb77ffee2b59ffdd11fca6fccf726ff927f240c46a8fc07f74004dab5e26f55a81ba5c1ca2921ef9ff35a0d64
-
SSDEEP
49152:R/UV6xZLUH55vL15FhhnIddr+wyr+g1p0FuyZrc4UPRUWkl/Dup:R/UYxZLSvL15FbIddywa+gnSuyZ44URj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700bccff4877ed3699a5f46b56340ed7
Files
-
700bccff4877ed3699a5f46b56340ed7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE