Behavioral task
behavioral1
Sample
7194b9a33746ee37d4ed4031648f19fe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7194b9a33746ee37d4ed4031648f19fe.exe
Resource
win10v2004-20231215-en
General
-
Target
7194b9a33746ee37d4ed4031648f19fe.exe
-
Size
967KB
-
MD5
7194b9a33746ee37d4ed4031648f19fe
-
SHA1
5ec2bede7c64cad1129715d77dac6cfce904eb28
-
SHA256
bbaeb07c3c043473015b77d516f0ac7422f0fc585df5e63d433134f6f9ddd16a
-
SHA512
1437c3ec6103aff2ef63a318802ccec9ee54b028c4efb61e2ad287f4dec664c9d0792c49023cc3e464034ac41c133b12f942825f757476c57ce18517a581a77a
-
SSDEEP
24576:sSLr1d2NsFpa87gf2GJxkDJcjKXbjO+sR7DzsDaWlBeJcoRV135N:sQ72NuBEf2GJxkGWXDsdADaWlBe5Fj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7194b9a33746ee37d4ed4031648f19fe.exe
Files
-
7194b9a33746ee37d4ed4031648f19fe.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB