Behavioral task
behavioral1
Sample
7c0d3e8f22866eac0fba26e19ebab6ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c0d3e8f22866eac0fba26e19ebab6ff.exe
Resource
win10v2004-20231215-en
General
-
Target
7c0d3e8f22866eac0fba26e19ebab6ff
-
Size
6KB
-
MD5
7c0d3e8f22866eac0fba26e19ebab6ff
-
SHA1
6b2f6544f373e41bfe0205a0f8236624fc28d06a
-
SHA256
49902b31926ae53b90e8b0700106527d8d7de4e72ff17f7459f6d83b4b6d4cff
-
SHA512
456b1b0b8e5debedb333586f9c278bb2be6fb3e9b55821418540296e95b4533831ffd6489ca3f8f02a871319a745f46dd209e8de933e7590001e8db2f059ef45
-
SSDEEP
192:9+WiMZsnYOpNnVAAFaNJhLkwcud2DH9VwGfctuOP:LZjOpNVA0aNJawcudoD7UMQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c0d3e8f22866eac0fba26e19ebab6ff
Files
-
7c0d3e8f22866eac0fba26e19ebab6ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE