Behavioral task
behavioral1
Sample
07a6666709a510ee85d5feceb4871ddf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07a6666709a510ee85d5feceb4871ddf.exe
Resource
win10v2004-20231215-en
General
-
Target
07a6666709a510ee85d5feceb4871ddf
-
Size
330KB
-
MD5
07a6666709a510ee85d5feceb4871ddf
-
SHA1
031c8d3c9b772630c086e0f47ac9d30f65389e47
-
SHA256
e00a43809a23b638a1f4ccf72d7c0d296e8831f911f21ab36d9224f36d2f5085
-
SHA512
76dd2eda3d49003c2334dd7b2fda087606a27c7ff9134e30822f48a73ec8c40cc8a443bfe4b68400d600c518afb0c0fc316ce11d256529cea6586c527de0c97c
-
SSDEEP
6144:b4uQTFFYtJ0hDYRLqLxNWyv7PuTv/OpSYoez5aFleIVxu4:bhYFY0iR2NrjPu7Jbez5mlP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07a6666709a510ee85d5feceb4871ddf
Files
-
07a6666709a510ee85d5feceb4871ddf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 888KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE