Behavioral task
behavioral1
Sample
7f48c895d2489105a5ec205655eeb57a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f48c895d2489105a5ec205655eeb57a.exe
Resource
win10v2004-20231215-en
General
-
Target
7f48c895d2489105a5ec205655eeb57a
-
Size
4.8MB
-
MD5
7f48c895d2489105a5ec205655eeb57a
-
SHA1
eaeaba18702b890de76b327ad08507da8538ca50
-
SHA256
6dff1534de7597efd6dcb1f5d3207a5f95f914a398747db1fa2e0590fb185ccc
-
SHA512
fb34e98949a4e7cce2d78322d3d386beafd3a1d226978ab8362c2771dd4f6968a230871e12cbc0db8224b9c95554206399fcd86afd4108836dcf1ebe78c3f703
-
SSDEEP
98304:EzZHMtDHFnLKQTaWv64gg3gnl/IVUs1j8XofseKWdygg3gnl/IVUs1jr:WZHMtDHFnLKBWisgl/iBrsefdWgl/iBP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f48c895d2489105a5ec205655eeb57a
Files
-
7f48c895d2489105a5ec205655eeb57a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE