Behavioral task
behavioral1
Sample
7136f44a02f08fb082299a3db7534323.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7136f44a02f08fb082299a3db7534323.exe
Resource
win10v2004-20231215-en
General
-
Target
7136f44a02f08fb082299a3db7534323
-
Size
37KB
-
MD5
7136f44a02f08fb082299a3db7534323
-
SHA1
e58748d8a886e741012457ac8c4a3a465819473a
-
SHA256
c19e122280a70c2dc70746d0e82099493cb476b597247b4460b45217c75e7bd0
-
SHA512
4360b037c5f6d8a45730f1cc1564907f4d29c27d2a0cc2c063292aefacc1614ff82db5357d7bb066066e85b001e82c58af6ac28cce8879ea10148365ae1bbb13
-
SSDEEP
768:gN5Zf7Q/qE8ELeNbxYX7odtTN7Wra6aCEHGGK1:AvWl3LeO7qNxI1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7136f44a02f08fb082299a3db7534323
Files
-
7136f44a02f08fb082299a3db7534323.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE