Behavioral task
behavioral1
Sample
7b05f77c17281852f2183533a15be7e9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b05f77c17281852f2183533a15be7e9.exe
Resource
win10v2004-20231215-en
General
-
Target
7b05f77c17281852f2183533a15be7e9
-
Size
10.6MB
-
MD5
7b05f77c17281852f2183533a15be7e9
-
SHA1
624802515aa74d6d8733b277207bba97baac1b53
-
SHA256
6830c31a1c0c60302a0e3e7d67b791108b1363b4a3f78454d4b1c6cc3f60b043
-
SHA512
6bc8b66c1d1944a09611f9bc7bf43094b846d54431d14269f50250b196d78b91e114a38f0b34c911135dfc41098baa7eac3b22a465cb351f187b9708cdded93f
-
SSDEEP
196608:Uf+Y6Ls990iQoqOwm/eKAWL7/Lh90iQoqOwmW8OrY/90iQoqOwm/eKAWL7/Lh90u:UT6xiQolfIiQos88Y6iQolfIiQoJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b05f77c17281852f2183533a15be7e9
Files
-
7b05f77c17281852f2183533a15be7e9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE