Behavioral task
behavioral1
Sample
7b5e0137795de595f4242e6987645779.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b5e0137795de595f4242e6987645779.exe
Resource
win10v2004-20231215-en
General
-
Target
7b5e0137795de595f4242e6987645779
-
Size
133KB
-
MD5
7b5e0137795de595f4242e6987645779
-
SHA1
16595da3ae458a3cfd7e39e310bab5175e18d75a
-
SHA256
c55c6f4f0ba9e1cfd46bd61b61b47dcdf0fdc6b2e329e9c929f92593042e465a
-
SHA512
7b656a74aa7040c2ff0bfc5b71fff41e209ba5cce685d383e3c8427ad996a8cd60579c3d095009999a79036d54ff0167aa4fe16c0a803fb186e04019d944514f
-
SSDEEP
3072:IuV+Z8/zJs5dfU0+B+YE9oj+/8c8FyKez3pxh8qumNkshZExo4dQxemnIQ:ICb/RAA+/8X/ezZN/6shaxotxemnIQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b5e0137795de595f4242e6987645779
Files
-
7b5e0137795de595f4242e6987645779.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE