Behavioral task
behavioral1
Sample
77d08412eff3faaba9f8af475af30eee.exe
Resource
win7-20231215-en
General
-
Target
77d08412eff3faaba9f8af475af30eee
-
Size
607KB
-
MD5
77d08412eff3faaba9f8af475af30eee
-
SHA1
1bbae4490063413af7a4c588f2afd479e22c6360
-
SHA256
6c46960246844f7453227d0acbf20601b7d3f27d3f01862e7f65bff65e251150
-
SHA512
08356f661245df411f41f1a415e3810d64835ca420564fec3d49280fc362654c04c8eb0b55f35f27c28e66d2a16440b80d36bd501bee76ff9f64e4ac4a0d555c
-
SSDEEP
6144:C0uIkf2sUAl3VPQrburK/UHEPTxiyKL/7J60KH5ryCo2b07g9gsT4Vj7q:HK2snDPKSoUHiifJMZHgMCdN7q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77d08412eff3faaba9f8af475af30eee
Files
-
77d08412eff3faaba9f8af475af30eee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pibmlhb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 471KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE