Behavioral task
behavioral1
Sample
07ef40db47b06cbf7421d8a168fe45d28ba3b5fedd9ad99457d545058e6050c6.exe
Resource
win7-20240221-en
General
-
Target
07ef40db47b06cbf7421d8a168fe45d28ba3b5fedd9ad99457d545058e6050c6
-
Size
79KB
-
MD5
dbaf6c747389aaad8848091c562af120
-
SHA1
de4b15111bf88d84ac6ae2643d1f75f8fafb742a
-
SHA256
07ef40db47b06cbf7421d8a168fe45d28ba3b5fedd9ad99457d545058e6050c6
-
SHA512
fe6a4ecbb071b3fe0c8a63a18db547373985b3d0ebaa370f2b8bc42c61d3305e9a9ea2e0a7bc542204f9144114e78aa7a9f3a7d562268bb60dc3135eeb27df5f
-
SSDEEP
1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpCA:zhOmTsF93UYfwC6GIoutiTU2HVS6+
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07ef40db47b06cbf7421d8a168fe45d28ba3b5fedd9ad99457d545058e6050c6
Files
-
07ef40db47b06cbf7421d8a168fe45d28ba3b5fedd9ad99457d545058e6050c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE