Behavioral task
behavioral1
Sample
7124aa74493d2a08c9527db909afa6455f2d3df426cfd8671d6a1c39281cdfea.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7124aa74493d2a08c9527db909afa6455f2d3df426cfd8671d6a1c39281cdfea.exe
Resource
win10v2004-20240508-en
General
-
Target
7124aa74493d2a08c9527db909afa6455f2d3df426cfd8671d6a1c39281cdfea
-
Size
2.6MB
-
MD5
a8edd73f11dc7535040ccc00064b0754
-
SHA1
541fd2839a2569e5be6021f701dae562260a8722
-
SHA256
7124aa74493d2a08c9527db909afa6455f2d3df426cfd8671d6a1c39281cdfea
-
SHA512
6d77c8b71ee3776abda406180cf8c95c448107daeb6f002090a8fbc0305eaed5f3ca5517aacaf05577cb7f862248c60db03d6c04ac3067bb7a463c0fcb519fa4
-
SSDEEP
49152:b01y5kldZgp+wfFTd+jFcaMNw/qccdMOkAuMst8ztlrlh3n9DuD5FiHmHl1qk:Y1y5kbuUwc2pkRMuerlZn9DuDTImHjqk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7124aa74493d2a08c9527db909afa6455f2d3df426cfd8671d6a1c39281cdfea
Files
-
7124aa74493d2a08c9527db909afa6455f2d3df426cfd8671d6a1c39281cdfea.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE