Behavioral task
behavioral1
Sample
00d787b8e3d211feaf1bb8a4e4625aab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00d787b8e3d211feaf1bb8a4e4625aab.exe
Resource
win10v2004-20231215-en
General
-
Target
00d787b8e3d211feaf1bb8a4e4625aab
-
Size
7.8MB
-
MD5
00d787b8e3d211feaf1bb8a4e4625aab
-
SHA1
e72760670a29aa2d56cf976e5f28fdf973b50049
-
SHA256
f9afcc8208469eadc25227acf7602f98620126ab2a7154e1514cddd9f1401993
-
SHA512
ba988c5c534a04ba9c4eb4d87fcbf461ed3dc2bdf4d257f4c88fb63ac9ec1d6dae3c5f3366030ee01ddda0333019811db8a9bdcb78d4491551425aa406cc0e4b
-
SSDEEP
196608:ShiWYp/Zgl/ibulgl/iqLJgj17MWgl/ibulgl/iG:SRYp/Z2Dl2x4/2Dl2f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d787b8e3d211feaf1bb8a4e4625aab
Files
-
00d787b8e3d211feaf1bb8a4e4625aab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE