Behavioral task
behavioral1
Sample
d7bbf2e0e7589d3748f8de7f8d28441f.exe
Resource
win7-20240221-en
General
-
Target
d7bbf2e0e7589d3748f8de7f8d28441f
-
Size
784KB
-
MD5
d7bbf2e0e7589d3748f8de7f8d28441f
-
SHA1
6c90585cad51384d279214488e06e65f2b522528
-
SHA256
4272c5d1c890d68badb8ce69987f866c6201eed8ecc2269b35639ceaddf1f357
-
SHA512
2cda684755cf93312cb04cfcd1e872a568e95007c799893706dc7c0e8cee761b5aec6946cfb8d321430b8e2027aaa5eb43086a60f3c91c25d5217d70b2ce1fa6
-
SSDEEP
12288:/UQO23eTYlm6Y91L8MfdsaQmSOMhY1w7KWufJ/UTM8ixM/tU5MgRmBYeVhx:/UQAUlmR1L5dsKwVufJX8iW/ABe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7bbf2e0e7589d3748f8de7f8d28441f
Files
-
d7bbf2e0e7589d3748f8de7f8d28441f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE