Behavioral task
behavioral1
Sample
7c4be1cfcd1a239ef1968219e9238b2d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7c4be1cfcd1a239ef1968219e9238b2d.exe
Resource
win10v2004-20231222-en
General
-
Target
7c4be1cfcd1a239ef1968219e9238b2d
-
Size
46KB
-
MD5
7c4be1cfcd1a239ef1968219e9238b2d
-
SHA1
f1b0b66f751a79b3b28909668cb4cb1f14d1d042
-
SHA256
c63a9e2f5a56b566dfc62d8171bd0f68143999c8c525e301b1868087a1a8c3c7
-
SHA512
4301f67606deff860744fc115ced2432f56be92e8703ae7394f5a6654581f4fe198edea711b938f15227434d05423b21f379213b2a4b8ae867742a34e6421406
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFErCnEHgD3cyqAmSIiDW:SKcR4mjD9r823FEYqyqyLGWKRf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c4be1cfcd1a239ef1968219e9238b2d
Files
-
7c4be1cfcd1a239ef1968219e9238b2d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE