Behavioral task
behavioral1
Sample
7d878de85fff24b374ae0e4d7ddf87db.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d878de85fff24b374ae0e4d7ddf87db.exe
Resource
win10v2004-20231215-en
General
-
Target
7d878de85fff24b374ae0e4d7ddf87db
-
Size
413KB
-
MD5
7d878de85fff24b374ae0e4d7ddf87db
-
SHA1
aa6f411d3f62fa9d1311a625cee572d65e0776a2
-
SHA256
f09aff19bf0a50ba86904f398182ed37b3f655a8e2772b979c7abedf789809a4
-
SHA512
5ef5d404eca61e562b59ed704541865b43156c65c0d5c3d22e6b40f1673023ea8c7c322301efce73f4723bea179a963f7547af2246505e11608dba6bceca1d66
-
SSDEEP
12288:bNdpTcpUE9GDjBiJuhUuvnvJNIfxAieRncae7nHm4YpfCaloS:bjoUXDjBi6vJAbec/7nG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d878de85fff24b374ae0e4d7ddf87db
Files
-
7d878de85fff24b374ae0e4d7ddf87db.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 407KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE