Behavioral task
behavioral1
Sample
7b2fac4aafdb2ddf7e1d1cb9fb62816c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b2fac4aafdb2ddf7e1d1cb9fb62816c.exe
Resource
win10v2004-20231215-en
General
-
Target
7b2fac4aafdb2ddf7e1d1cb9fb62816c
-
Size
97KB
-
MD5
7b2fac4aafdb2ddf7e1d1cb9fb62816c
-
SHA1
ed915750d91bd875a868be834f57af3f57d0ac1e
-
SHA256
4bf0fc981c31873e0e38d4c47b6ddfd243298179306a8b5a91cc75338329ed84
-
SHA512
78018e3b453dc27a85cfd638b9d3462f7c40b041cbe0085868ee2b04c8921c4efada06657237684a7ed6afa222a0b4ce14fa2a94cf05a9485465fcdaf913f8dd
-
SSDEEP
1536:G8JQ/BWkk5rTPpMKo1hKrYPt0JNC+XWH/7fGsi/Dr046ZH7cVsnPigL0JhdRQ+hP:XQI7xTPpMKU4sYNi/72brf61E8JW5h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b2fac4aafdb2ddf7e1d1cb9fb62816c
Files
-
7b2fac4aafdb2ddf7e1d1cb9fb62816c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 981KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE