Behavioral task
behavioral1
Sample
7f1e97f99c5a2f867a0c4b6acd1c7ec7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f1e97f99c5a2f867a0c4b6acd1c7ec7.exe
Resource
win10v2004-20231215-en
General
-
Target
7f1e97f99c5a2f867a0c4b6acd1c7ec7
-
Size
56KB
-
MD5
7f1e97f99c5a2f867a0c4b6acd1c7ec7
-
SHA1
675d292dc912045c509509cde937b559479136ce
-
SHA256
8f7b68bc8a8997faeefe870cd3a82146cbb9199309ca28c756f986d4b53c2c1f
-
SHA512
28fe43bb4fed039bb4d302a098e0e86fbb7cd624fb6c8e97531142743b94467dca66deadcf6b9f49da3fa6560b2061a0e8c28a31a41215fd7b1e37a321aecac9
-
SSDEEP
1536:B1Xqmqo/QmlR7AG+QRHxBTPfASFm7enouy8QEY5qXXp:e5oQm/tXlASc7+outQLIXXp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f1e97f99c5a2f867a0c4b6acd1c7ec7
Files
-
7f1e97f99c5a2f867a0c4b6acd1c7ec7.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE