Behavioral task
behavioral1
Sample
7775bd8afaa662d6192f40e8b103d561.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7775bd8afaa662d6192f40e8b103d561.exe
Resource
win10v2004-20231215-en
General
-
Target
7775bd8afaa662d6192f40e8b103d561
-
Size
133KB
-
MD5
7775bd8afaa662d6192f40e8b103d561
-
SHA1
61c12c63ca3d87aba673d104f10f916f65c8d33e
-
SHA256
730e80663fc56e4fef89f8644b88b413696e957f05a41fa28c2b59fab8b13c47
-
SHA512
ac50c1bd1dd77c04762b65af6952546d49d4bd000d18329f134fdeb450e7569e6074179587969a0e879744abb34ccc4ede740feb21323d5d9cf344cf62ee1b74
-
SSDEEP
3072:Z8DL0zWQhHF6DndWIAn6Z96XXjoyhm0GUFFFIjcJLPFzLOoR95cdrYuQ:6fjQhlqAn6ZEXXjoNYFS4hN3B5+Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7775bd8afaa662d6192f40e8b103d561
Files
-
7775bd8afaa662d6192f40e8b103d561.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE