Behavioral task
behavioral1
Sample
7f6c75be2a99d2bc73afb76fe66889b26de2d20c70b5bdc7d7455e60bd84b473.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7f6c75be2a99d2bc73afb76fe66889b26de2d20c70b5bdc7d7455e60bd84b473.exe
Resource
win10v2004-20240508-en
General
-
Target
7f6c75be2a99d2bc73afb76fe66889b26de2d20c70b5bdc7d7455e60bd84b473
-
Size
83KB
-
MD5
68eea90b130a675de06f5e9f74785b23
-
SHA1
015f0d1a8dfe0d010ad371d0d6807ee76e347fe2
-
SHA256
7f6c75be2a99d2bc73afb76fe66889b26de2d20c70b5bdc7d7455e60bd84b473
-
SHA512
5a8448d6584817dbfb3564ba7cd4b182b2866327e2f85c0ad0f08400a17b9d373d3f341f1d11423617b19e65dc2aa55de5647f6d46d441b25165a9d3fa605591
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUshuUOdwBclBsz:fnyiQSohsUshuUOdrlBsz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f6c75be2a99d2bc73afb76fe66889b26de2d20c70b5bdc7d7455e60bd84b473
Files
-
7f6c75be2a99d2bc73afb76fe66889b26de2d20c70b5bdc7d7455e60bd84b473.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE