Behavioral task
behavioral1
Sample
7f8db7f5cc6690b38fbd85015d2e749a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f8db7f5cc6690b38fbd85015d2e749a.exe
Resource
win10v2004-20231215-en
General
-
Target
7f8db7f5cc6690b38fbd85015d2e749a
-
Size
445KB
-
MD5
7f8db7f5cc6690b38fbd85015d2e749a
-
SHA1
39dca4c3ed6dc751de0a9528cc798f76f7601465
-
SHA256
b866ff47ec48ccb746087794a071ce10c943b314b62f30169df5177c535f3983
-
SHA512
a5ea5a6cfcab78ca1fa6f6eb4d08d9ffe32fe23cb2477b32f10025e7b8668551da8d84ca88fa1d982731681f83ea9181901b9129bb114dae63809fc27aa63fd6
-
SSDEEP
6144:IWqjOyTnFNYcMjvb6s06y3IHkD8PObZJ282FZzA4fdytV+nyyMrDQI1xqX0Bru:IW3sFNZ3fBrbZE8WzJnw11xqX0By
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f8db7f5cc6690b38fbd85015d2e749a
Files
-
7f8db7f5cc6690b38fbd85015d2e749a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE