Behavioral task
behavioral1
Sample
7379d5ca46d2c34e2b411c64c78af932.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7379d5ca46d2c34e2b411c64c78af932.exe
Resource
win10v2004-20231215-en
General
-
Target
7379d5ca46d2c34e2b411c64c78af932
-
Size
222KB
-
MD5
7379d5ca46d2c34e2b411c64c78af932
-
SHA1
7020848355cd90fcd168826ff94908825517a7ed
-
SHA256
de9455f93ec8a52c880859900828af0875f43499838f88781446dc8d2e454255
-
SHA512
3461d60ec648ef9e7fe0741f4fb40978b0b649712f5bfc6f88e5edfe4a39803bcd623ec426958591e60611421dd2b6cccdf6d186719da520f6f21670c9c05332
-
SSDEEP
6144:lGFRZRrN4ElohjOXP8ABKmWqhI5SjfFurfroSZ/P:kxrN1lohjOX2mVhjdEfroSZ/P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7379d5ca46d2c34e2b411c64c78af932
Files
-
7379d5ca46d2c34e2b411c64c78af932.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE