Behavioral task
behavioral1
Sample
7fae302f69ce6005438b2a98bb4dc6dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7fae302f69ce6005438b2a98bb4dc6dc.exe
Resource
win10v2004-20231222-en
General
-
Target
7fae302f69ce6005438b2a98bb4dc6dc
-
Size
266KB
-
MD5
7fae302f69ce6005438b2a98bb4dc6dc
-
SHA1
e88cebcb5d2e4d65b11d5cec19803172ef041635
-
SHA256
5e7e12cdf6bc129e2bb2ecf8cac3f15991b5450167f4a425fb9006f6fdd83d98
-
SHA512
feb6c4bc0f05c11a31eae12cced6cbfaf08060b903abed76c7bf279e2ae7fe9406b84c451cce53fdc57ecf9e0844d4e4bb39d5deb6dce26209c35ebe536d8b98
-
SSDEEP
6144:x99Wmom/YF7REiLw8dR90FkMyk05IbF9Bo+JCFQ:x99WT7R/hdRa371o+t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fae302f69ce6005438b2a98bb4dc6dc
Files
-
7fae302f69ce6005438b2a98bb4dc6dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE