Behavioral task
behavioral1
Sample
a207dd40197260b58946c23032ee72f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a207dd40197260b58946c23032ee72f7.exe
Resource
win10v2004-20231222-en
General
-
Target
a207dd40197260b58946c23032ee72f7
-
Size
2.6MB
-
MD5
a207dd40197260b58946c23032ee72f7
-
SHA1
82f990ce9719c831ac5c17bdf548b294de20774d
-
SHA256
a4f89e7a1fd51589ac65eb1c670dc6ea80487851f9433a83e2e33b9a5ecfff19
-
SHA512
137df7bf50045f459b3e480636cc45a0ddf10c9188429d2727ea957c52238a8a597f0ccf525e6608157bfbfd5cbe93ac68c78c673a739472b1bc8d42b437f375
-
SSDEEP
49152:trXJnyM7smWDC87vRhXBbUxYxOXU+53ZShJHPh9ay3:VJPWRIJXB0Hf3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a207dd40197260b58946c23032ee72f7
Files
-
a207dd40197260b58946c23032ee72f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE