Behavioral task
behavioral1
Sample
7c05a91b2d8cedf61a05f7bf36d72c41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c05a91b2d8cedf61a05f7bf36d72c41.exe
Resource
win10v2004-20231215-en
General
-
Target
7c05a91b2d8cedf61a05f7bf36d72c41
-
Size
133KB
-
MD5
7c05a91b2d8cedf61a05f7bf36d72c41
-
SHA1
bdfd9e36779d3b8b2a68e1fe4cfb7346b056c48d
-
SHA256
63611f693072a6aaaca993853a337a77a2112aba18f9a4905c8d04fd26b5d960
-
SHA512
99c3cf58c47211be0fce27836021226f81177131f35ba0ef7c6466b0dff0601d40595718bcc7ad5a3eb265d89455f58d782f13d5b6938f923a43ca8a753af738
-
SSDEEP
3072:zZXQG4avihnnuIksBEyr19Z0GIhYZucgSJgAyJ4D/RfP+TQ:lXQ3hnJuW1XYuVJgAsM5XkQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c05a91b2d8cedf61a05f7bf36d72c41
Files
-
7c05a91b2d8cedf61a05f7bf36d72c41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE