Behavioral task
behavioral1
Sample
37eb9a9b07ed0f10365cfef02d3ef264.exe
Resource
win7-20231215-en
General
-
Target
37eb9a9b07ed0f10365cfef02d3ef264.exe
-
Size
402KB
-
MD5
37eb9a9b07ed0f10365cfef02d3ef264
-
SHA1
756ed79619db68a11a5846897afe8194e9cba967
-
SHA256
525ebca2d46c1aa9b10ee024caffb303beb0f6bfecb10ba3e91f8654789f85a8
-
SHA512
c3449672fb116c4fe094f707c279b3e0fca9ec19e58889bfe5bc56d34485e5c216cd2834485c572aad381848a88b70abfbb54a5a721781be016e30b75afae62b
-
SSDEEP
6144:5maKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgU:OSmLAuEY71fviagATFmebVQDcYcg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37eb9a9b07ed0f10365cfef02d3ef264.exe
Files
-
37eb9a9b07ed0f10365cfef02d3ef264.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heowr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE