Behavioral task
behavioral1
Sample
c7694a21c9797d5f90ca1636ed0ff2a6.exe
Resource
win7-20240221-en
General
-
Target
c7694a21c9797d5f90ca1636ed0ff2a6
-
Size
784KB
-
MD5
c7694a21c9797d5f90ca1636ed0ff2a6
-
SHA1
cda9f2cd78c4753613b5ae2435d0b50222c36707
-
SHA256
28a5d4d6cd86101d4ebec995cea4a6ceacda3f381d80d076bf3f1e6b43389c3a
-
SHA512
3dfe887374dca86b1aa1273f7a3ac8c1df5027c50c53371124659f19ef119891ebca166bbff73ed6d6c2e01d3e6c0f60caf03c98aaf7a6ce71f6b0d890e9816e
-
SSDEEP
24576:1znmIo7jbaZJkdRBxQEBCMZwekpNvph//bi:1m57/aZaZeMCMZhkpt3b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7694a21c9797d5f90ca1636ed0ff2a6
Files
-
c7694a21c9797d5f90ca1636ed0ff2a6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE