Behavioral task
behavioral1
Sample
7eef68a0c89570663f50aed72bd9bdb6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7eef68a0c89570663f50aed72bd9bdb6.exe
Resource
win10v2004-20231215-en
General
-
Target
7eef68a0c89570663f50aed72bd9bdb6
-
Size
63KB
-
MD5
7eef68a0c89570663f50aed72bd9bdb6
-
SHA1
db508af4502260a9dd07fbeb726d53d3a763a958
-
SHA256
17a79e5ff411f57ff21d3b6bcc9caa9fd1d3f12d24e95002b10b15cc3def362a
-
SHA512
bbd4bdfd82d564199adb98563fc6499a3d2852bbc011d7b66f9410a3a76ad86e8e90cbafff8bc0abbb1627ca363b28c5836f7ae51979767dfc9038f499e5a80e
-
SSDEEP
1536:LvA6MPq9pcULQMvELsxNypg2MuTGqcHogYPv6PdEg1FAY5m:LrMPscuvELsL0DMuSLIEOgHA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eef68a0c89570663f50aed72bd9bdb6
Files
-
7eef68a0c89570663f50aed72bd9bdb6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE