Behavioral task
behavioral1
Sample
7c4f78ea8d53bbf121af0490aea67644.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7c4f78ea8d53bbf121af0490aea67644.exe
Resource
win10v2004-20231215-en
General
-
Target
7c4f78ea8d53bbf121af0490aea67644
-
Size
22KB
-
MD5
7c4f78ea8d53bbf121af0490aea67644
-
SHA1
4bc0ff3a6b6a081b53e79fb671270b8f8fe9c067
-
SHA256
d336fee3b6c2388d31f6b3c8589b7a386b413bbadda43822ebb388e5d503740c
-
SHA512
772cca7a2d43159bfcf8d77cdfcef072d229a18bfb29b406e2c1b0cea1e336290034d2c9943605ea521b700be970cd254e280d6d044999e221bf897a920a7ff9
-
SSDEEP
384:AQkZbV8i+fIZFQyZpz0q7bYKkxRjK36ct14yvXbB75zhwUaNJawcudoD7UQOv:jGcAPQIpz0Mb18Kdt14yvLhlhEnbcuy+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c4f78ea8d53bbf121af0490aea67644
Files
-
7c4f78ea8d53bbf121af0490aea67644.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE