Behavioral task
behavioral1
Sample
7065ebdd9f7e6e6ddc196a9f4762f8fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7065ebdd9f7e6e6ddc196a9f4762f8fb.exe
Resource
win10v2004-20231215-en
General
-
Target
7065ebdd9f7e6e6ddc196a9f4762f8fb
-
Size
223KB
-
MD5
7065ebdd9f7e6e6ddc196a9f4762f8fb
-
SHA1
d5752e05b0d8797b960f01eed186acf96735076d
-
SHA256
52ad883f02b142701a6f29758bc9b1fefcd7f8caaba227505265d53dcbd25c50
-
SHA512
bc987705a416a383cb256ac7d8d569159c4974f808273c11d94fe9c536a7d583d7d92620e2bcbd1d62118c7a70cbca77b0dd72ae1f8aeee46c2580ec36bcff5e
-
SSDEEP
3072:C28dhfkRaa4WYuDdpEEbLgIqiwVbchNe9d6dmjBxNeWp78fIKM4xVDjmObE:/8dJkoZ0n/UN/37/KJxn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7065ebdd9f7e6e6ddc196a9f4762f8fb
Files
-
7065ebdd9f7e6e6ddc196a9f4762f8fb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE