Behavioral task
behavioral1
Sample
07484c1a45cc25184683bbc8dfb07f9c.exe
Resource
win7-20231215-en
General
-
Target
07484c1a45cc25184683bbc8dfb07f9c
-
Size
402KB
-
MD5
07484c1a45cc25184683bbc8dfb07f9c
-
SHA1
b28b3e22bc95a21a098b5ca444daffbf4cdfabf3
-
SHA256
51755f3b2f5ff12c9ca88c666ba47c32f23dc64f578554c64ba224b27c7fec7b
-
SHA512
6b12bea4d4ec42e97ed7ea7d0df76317fdee1faf491832185d23b27beb4d714a1f72e1ae19c0298a2ac13339ba20f5cb781562d77c29688d371b8bd9b8e02376
-
SSDEEP
6144:nmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDg9:USmLAuEY71fviagATFmebVQDcYc5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07484c1a45cc25184683bbc8dfb07f9c
Files
-
07484c1a45cc25184683bbc8dfb07f9c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heowr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE