Behavioral task
behavioral1
Sample
7391f082ef788951097d81beae7d83fc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7391f082ef788951097d81beae7d83fc.exe
Resource
win10v2004-20240226-en
General
-
Target
7391f082ef788951097d81beae7d83fc
-
Size
1.6MB
-
MD5
7391f082ef788951097d81beae7d83fc
-
SHA1
5fb7a5c2cbf152d552dea411010a3a40894ab3e9
-
SHA256
caa59ba5c945599466ea5ea52d2cce815bca3a61250827b44000e1f5ee253e9f
-
SHA512
381fa6732c5b92d4aa18e87f78e99aae662511e1030e3ebec8e9f48bf23ce3c00eed19d644f26b771bf80ee5e32cad14cab82a3791ee6656e1b7858a7c2b098a
-
SSDEEP
24576:JBb0euWpDZcOoQEKMkVVGqceAKWCANqDJ0ow3XH5WVkZIwAD73m83dp:Pb0ResQBNfACAEW/XHcVkZvQLLT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7391f082ef788951097d81beae7d83fc
Files
-
7391f082ef788951097d81beae7d83fc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE