Behavioral task
behavioral1
Sample
a7dec609420488dd3259388d27921f4e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a7dec609420488dd3259388d27921f4e.exe
Resource
win10v2004-20231215-en
General
-
Target
a7dec609420488dd3259388d27921f4e
-
Size
15.5MB
-
MD5
a7dec609420488dd3259388d27921f4e
-
SHA1
b33580c890d87d88a57cb4090b6de7677c318646
-
SHA256
9dc475f553156909daa16d3453f070d25a76b703c3e156c00ff745f9c4c3c0a2
-
SHA512
324b290918d0d4ec37f5538d93247988e78885cd16ff029e874bb29c9f17e81edab0b4eac089c1fd94e5a14fd569f46b6ae8029a0388649aaca702b931c70e3a
-
SSDEEP
98304:nIl+YA/QCt20AS5jpfEBr40Xu6ojfjpfEk7eIINlezpjpfEBr40Xu6ojfjpfEG:W+Ys60AS5pE1YpEk7e/6ppE1YpEG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7dec609420488dd3259388d27921f4e
Files
-
a7dec609420488dd3259388d27921f4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE