Behavioral task
behavioral1
Sample
7a5939de8d41d4dd766757d4c64815ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a5939de8d41d4dd766757d4c64815ed.exe
Resource
win10v2004-20231215-en
General
-
Target
7a5939de8d41d4dd766757d4c64815ed
-
Size
532KB
-
MD5
7a5939de8d41d4dd766757d4c64815ed
-
SHA1
77199f1f238c769cbf3037c7531d5bc2f2e57901
-
SHA256
4a21617f012ac7668614cd35f3085b5ac504c003b6a93c09159445be5f13e43d
-
SHA512
766dbd6ecade145df2c0566acebde25ed538574d67ca4dc290fe8a61b7de40d67401bf952d020e730fcd5607468fbe774723b411e71036b03037d80db95ef908
-
SSDEEP
6144:DHOOeDpBMKvN4WPccG2t0rMQ2RqR3AHyUiECn7rSuOsDz0mwrHBr1Yy:DHOpBMKvN3cv2+rMQFDn7eTsDz0pzQy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a5939de8d41d4dd766757d4c64815ed
Files
-
7a5939de8d41d4dd766757d4c64815ed.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE