Behavioral task
behavioral1
Sample
07400ab86cc36d5e4fd275d1efd0d175.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07400ab86cc36d5e4fd275d1efd0d175.exe
Resource
win10v2004-20231222-en
General
-
Target
07400ab86cc36d5e4fd275d1efd0d175
-
Size
3.0MB
-
MD5
07400ab86cc36d5e4fd275d1efd0d175
-
SHA1
cc6a4683cbcba457e7e98171e84775d17b8e8bec
-
SHA256
e59f9fcd127b50ddbebd2200a43003bf110e96e1cf5de1987b9af4bace5a25e7
-
SHA512
5d022c9ba07c709532e975f5ad20d13fc1f55db4a8cf455b07bbd70e344aa0ee132d56032ff4bda49e7dd723eeb4cdbdedf5d3f9e521f329372ba50cb702a849
-
SSDEEP
49152:wWulY3Daz60LJRThhfOVxfcakLupxWh1PND1cakL+x7S9P7b2t7uQ7j2ugaC9TcM:zyY3DazDLJRT/fQfcakiXWh1FD1cakqE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07400ab86cc36d5e4fd275d1efd0d175
Files
-
07400ab86cc36d5e4fd275d1efd0d175.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE