Behavioral task
behavioral1
Sample
7c61ae666945c13c090a93982286c126.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c61ae666945c13c090a93982286c126.exe
Resource
win10v2004-20231215-en
General
-
Target
7c61ae666945c13c090a93982286c126
-
Size
133KB
-
MD5
7c61ae666945c13c090a93982286c126
-
SHA1
935d4d551e0105c77a5a9f1499df09e2a4c18912
-
SHA256
dc9e532a88639cd803a84ee4940f9ba7e81d3909deed847fae821e64008c3a4f
-
SHA512
99bc8b9772c7436b0bee4417c4cde94330c2f046e50503b4848e35502c5be879a7604ae8b641d4a4fa59fee57aebc01bd5f1673503adfea33fd4e155d61958f9
-
SSDEEP
3072:8V5tigqoRhve/Fjf4J3iYE/VIre9eZI1VXQ:8VgkhvedgivgqmInQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c61ae666945c13c090a93982286c126
Files
-
7c61ae666945c13c090a93982286c126.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE