Behavioral task
behavioral1
Sample
754294b79f2963dbf502eb79377dc77c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
754294b79f2963dbf502eb79377dc77c.exe
Resource
win10v2004-20231215-en
General
-
Target
754294b79f2963dbf502eb79377dc77c
-
Size
1.4MB
-
MD5
754294b79f2963dbf502eb79377dc77c
-
SHA1
dd1d70d8b8dbb92095643662cd9d9d342042e89e
-
SHA256
01da3c6ad513b0ece06e1d262b70105c8f9f0e972490b9054ea0eb318203501f
-
SHA512
07002a9885aa7806d921a273c9527696f7742298aa4079f9aa0b60ac718b8f6df19fc26d76fe73604cac126009a0e7bb97e7ad8d409f9ff21e30dd07e1d7f887
-
SSDEEP
24576:y6yJMY9UFoBDhkeYM1jZR9rzUbia9JVe0hs5WvBiERJMhV8L1bT6Ey:1Y9UOBVOM1jZ3zaiape0hswBFRJMhKL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 754294b79f2963dbf502eb79377dc77c
Files
-
754294b79f2963dbf502eb79377dc77c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE