Behavioral task
behavioral1
Sample
7d7fa1ec2d3356d9fb8ae455c733978f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d7fa1ec2d3356d9fb8ae455c733978f.exe
Resource
win10v2004-20231222-en
General
-
Target
7d7fa1ec2d3356d9fb8ae455c733978f
-
Size
468KB
-
MD5
7d7fa1ec2d3356d9fb8ae455c733978f
-
SHA1
a3695c6806674f0bc56e1f1df512266afc7c1726
-
SHA256
e7bcc5f27e19e3a1b91d9e4a5fa2d625991317cdc9d8c2a3900e98267731d58d
-
SHA512
d30cccb4a0dacab6378f9b357c144c3705d82a6ff06d0e9b4d57aa14674a554889db2fc44648bcb1b46c5382ff628af22db1f22b76d856c515a0ae1018ccdf31
-
SSDEEP
12288:EvMd1yHYRV1MXE8P6bOLxAf5Y9yCKhbt:xcHYRHMXj6bOlqt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d7fa1ec2d3356d9fb8ae455c733978f
Files
-
7d7fa1ec2d3356d9fb8ae455c733978f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE