Behavioral task
behavioral1
Sample
7e1dc5c6f063ff71dab22dfac5fd22b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e1dc5c6f063ff71dab22dfac5fd22b4.exe
Resource
win10v2004-20231215-en
General
-
Target
7e1dc5c6f063ff71dab22dfac5fd22b4
-
Size
5.1MB
-
MD5
7e1dc5c6f063ff71dab22dfac5fd22b4
-
SHA1
394d8c8ab468694129ef39cd02c019370c344ea7
-
SHA256
7577eb725118267d3fc8997d47b3a93207a4c0750798e76caf7ad5adb1346151
-
SHA512
d0b113fe3de0a393e8c6ebac6a881773c5f247c0188fa503faf0b1cd4654d0ac0bd9f2d9b691eb9d4dfade7bed385fa048cb338ec9d98c45cbe7898689b1ef7c
-
SSDEEP
98304:ZekMQSl7VzP9pSOTj3B6LbCclKTQNNSKl3:HgpP9poLbCclKTSY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e1dc5c6f063ff71dab22dfac5fd22b4
Files
-
7e1dc5c6f063ff71dab22dfac5fd22b4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE