Behavioral task
behavioral1
Sample
0a7c07d76c0eb6ba8936e2b9819cd8e6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a7c07d76c0eb6ba8936e2b9819cd8e6.exe
Resource
win10v2004-20240319-en
General
-
Target
0a7c07d76c0eb6ba8936e2b9819cd8e6
-
Size
349KB
-
MD5
0a7c07d76c0eb6ba8936e2b9819cd8e6
-
SHA1
c564fe79ccf56c5081eda1cd2eea21011583dcec
-
SHA256
fac1891a852529de215ab884fa3573c34412d65b04cdea7bf600bc91b5b52e8b
-
SHA512
947880b5c4df077b3b3236aa446a1554be8f91b1067f3a7f00a0d63770d6dbe39a3123b03a9ee130549a5ced887ae218f3f02b9a0a697d171b5d38b6cf8babf8
-
SSDEEP
6144:6jluQoSFIo5R4nM/40yJbECHwKx28B20z5dI8tjbTK6Wy+4pMX70KGB2wDSe96kO:6EQoSvqhdHz281z5dIkj66y4e7rG3nB0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a7c07d76c0eb6ba8936e2b9819cd8e6
Files
-
0a7c07d76c0eb6ba8936e2b9819cd8e6.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gih Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB
.pbws Size: 512B - Virtual size: 4KB
.asji Size: 512B - Virtual size: 4KB