Behavioral task
behavioral1
Sample
7064fe2af4220b6537263a765024e46f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7064fe2af4220b6537263a765024e46f.exe
Resource
win10v2004-20231215-en
General
-
Target
7064fe2af4220b6537263a765024e46f
-
Size
4.9MB
-
MD5
7064fe2af4220b6537263a765024e46f
-
SHA1
4eb1bb5d33472c0777caaa050610f7a51fa6d290
-
SHA256
a89927efc27b2c92fb67cc43580cb7d838558746ad9bd320482882b659545a1f
-
SHA512
5faac13f08c50f992436d07d5f0b55c6ea1ef4d2913942aaccebc7e69aa973c938bd944f6f6093b65a24fc7b1c6c1b60d365b77003bd6a052cc39c7a77f4027b
-
SSDEEP
98304:QzY1JZLJl1hwgg3gnl/IVUs1jeJHi/lrE9L+Dsgg3gnl/IVUs1jeR:QE1JDWgl/iBiJCd41+DIgl/iBiR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7064fe2af4220b6537263a765024e46f
Files
-
7064fe2af4220b6537263a765024e46f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE