Behavioral task
behavioral1
Sample
77b0853e2442bd40d8423a3e22e4c880.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77b0853e2442bd40d8423a3e22e4c880.exe
Resource
win10v2004-20231215-en
General
-
Target
77b0853e2442bd40d8423a3e22e4c880
-
Size
133KB
-
MD5
77b0853e2442bd40d8423a3e22e4c880
-
SHA1
11c2fd0a963e9fbbe8f30f00f2c797caaef071a7
-
SHA256
76ad3a05de45231f20ac05a43f2ae2a9842ee675bd8953eaa02189ae5e6e9b03
-
SHA512
73be7f1a85efd8711d989174ab3f1f7cb28ba18f93e9358c753170fecbaa50f075817be91ad8266d5c94419b13128d737521d40bead8dfdcb329bf057eb24e37
-
SSDEEP
3072:aJTA54yRErmMh58ZWFAnA4gFN6BKk6I2lDgzHgSyKnpwO8/Ng8Q:gTPrmMh5vAnPgFN6BxF2JgbJnpwO0tQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77b0853e2442bd40d8423a3e22e4c880
Files
-
77b0853e2442bd40d8423a3e22e4c880.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE