Behavioral task
behavioral1
Sample
7bb5f143d992291df2a2469fe6a19e5e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7bb5f143d992291df2a2469fe6a19e5e.exe
Resource
win10v2004-20231215-en
General
-
Target
7bb5f143d992291df2a2469fe6a19e5e
-
Size
316KB
-
MD5
7bb5f143d992291df2a2469fe6a19e5e
-
SHA1
9f65c2015ed47772475a613e3ec071547bbc9028
-
SHA256
8822b7d77f21005de1d884ac8a7ded986eda5694a6f59efa38b0ba521515e3fb
-
SHA512
d674ffcc68f0605ad7ee28b11bd36b240e92018ff77a38a4d9c0a0c12ac5d910290e88601d98ea32a2f09815d0e8dee788dc1cb09a0d2cc978fc538d67671eb5
-
SSDEEP
6144:2SkOMehLIKyD+iGiTQBwywi0SgVWJp4lSgOF6iMxv:FkOMehJyAiTWwji0SgVW74lxEq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bb5f143d992291df2a2469fe6a19e5e
Files
-
7bb5f143d992291df2a2469fe6a19e5e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE