Behavioral task
behavioral1
Sample
7aa2f47d3b960b717993b338705f442b.exe
Resource
win7-20231129-en
General
-
Target
7aa2f47d3b960b717993b338705f442b
-
Size
63KB
-
MD5
7aa2f47d3b960b717993b338705f442b
-
SHA1
12a7ab999312e41b83f67b6496376da18269df94
-
SHA256
157ed1654d7b6a6166a05e634c0df2785599086fda6e773ea7a723cfb3496668
-
SHA512
52f833b53a1e9d0e3079cc4bc484cbf3a2a0a9aa54b38150218d44434f0f7d91d67d8319486d607e8fc30688ebefb54b1498e95dab7b82e3bc95b6501be067b9
-
SSDEEP
768:oZ0xsb8grTI3XZY5hDOOpxMx6THDK1NpyVOYrkBvUQGOF8gfXMub0narzIfGZ+Di:oSxsYgwoDO1+2VmaXpNZ+23
Malware Config
Signatures
-
resource yara_rule sample upx -
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7aa2f47d3b960b717993b338705f442b
Files
-
7aa2f47d3b960b717993b338705f442b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ