Behavioral task
behavioral1
Sample
c7dab1377b36a1b4e6ee42a36c2fb73f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c7dab1377b36a1b4e6ee42a36c2fb73f.exe
Resource
win10v2004-20231215-en
General
-
Target
c7dab1377b36a1b4e6ee42a36c2fb73f
-
Size
1.8MB
-
MD5
c7dab1377b36a1b4e6ee42a36c2fb73f
-
SHA1
108e4c3556be5a5f2c4c28f45995a94ef7fa98bf
-
SHA256
e6a5a2db5f8dbaf683b4b29d4f26c919029cb9726a136e858fc2ea64235cb5cc
-
SHA512
9bd229de388fcebb18add361ba8bee49d124b84a4b8d7fe4751a2fc18a96b4fafc1f12e41e4cea31f3923226102fa834a26b239d76bf2b0921ed660165505e51
-
SSDEEP
49152:hrqvPtqy1KDaFxbryOdVIe7eVEmfKZ+ulP3dWmHI:MginJrySVV76by3I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7dab1377b36a1b4e6ee42a36c2fb73f
Files
-
c7dab1377b36a1b4e6ee42a36c2fb73f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE