Behavioral task
behavioral1
Sample
7b7e5a41e26147547ab1c6e1dba3c304.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b7e5a41e26147547ab1c6e1dba3c304.exe
Resource
win10v2004-20231215-en
General
-
Target
7b7e5a41e26147547ab1c6e1dba3c304
-
Size
1.3MB
-
MD5
7b7e5a41e26147547ab1c6e1dba3c304
-
SHA1
1c020a6e3df5ef1e078a37fba9a468e76c64cb18
-
SHA256
3dd19f1ab73c6cff49cc6ef9d6c0927d8b2491512f63894d52d3070da1e32d68
-
SHA512
dd85effd12eb1227985d5cb34340f66416ba24434e9eba63d5df05cb7f2c7f16e6746499ccf77fb85027489fb70ebfde6328a66f7e95181acfe282fdea913a46
-
SSDEEP
24576:3OKLkDzrlC3Hk3a9YqrAJBsRTxVmIZLfGKUs1obCkgsNEpX/X1y0vG:+KLkDvwEGYuAJBcT+srGKj2CkgUg/l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b7e5a41e26147547ab1c6e1dba3c304
Files
-
7b7e5a41e26147547ab1c6e1dba3c304.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE