Behavioral task
behavioral1
Sample
7af0ef3687d71f932919748f6c4e9690.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7af0ef3687d71f932919748f6c4e9690.exe
Resource
win10v2004-20231215-en
General
-
Target
7af0ef3687d71f932919748f6c4e9690
-
Size
1010KB
-
MD5
7af0ef3687d71f932919748f6c4e9690
-
SHA1
ede6e1eceefec29052df1e1161c86a805e0d8e51
-
SHA256
a5ca8ee8b700f442e39858df57302e0236146b0ba9d5706706693657ab74d3f2
-
SHA512
72eb36bc392fc47ed30107e0128b6df1832735af34123494a3a523d0304d6b5e84a271a3156e182d3b7468b0ba375600ceecf708966dd3404b6f398ccad3b7dc
-
SSDEEP
12288:GE3HTEJDdZMbIYTfm6hiYc5plDFwrilMiYTfm:GE3gJrlmfduvlB7lbmf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7af0ef3687d71f932919748f6c4e9690
Files
-
7af0ef3687d71f932919748f6c4e9690.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE