Behavioral task
behavioral1
Sample
7cb6fdbb2acf486132bb364c11ee8a8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cb6fdbb2acf486132bb364c11ee8a8b.exe
Resource
win10v2004-20231215-en
General
-
Target
7cb6fdbb2acf486132bb364c11ee8a8b
-
Size
115KB
-
MD5
7cb6fdbb2acf486132bb364c11ee8a8b
-
SHA1
679388921a5ddb70d6b5dc2c4ec7e446822998c0
-
SHA256
fc1c256acc5acf2bfffd67c561e7dc0bf0ee0a4be6ea12fc693b27566c273bbc
-
SHA512
d5a0a78f2f76e1727b580a304941b868124a4c2ae72f43feeeeef09ff5bb85f943298da3aa784911649e1b6e8b6e200c128a660c93c40ce50c67b9dd8168765f
-
SSDEEP
3072:HmmBbq1mQC39Yf0akqNbM64tKiMKW0noCbLC2Wneu:JBOgV9YXkqNbjHgRoXnd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cb6fdbb2acf486132bb364c11ee8a8b
Files
-
7cb6fdbb2acf486132bb364c11ee8a8b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE