Behavioral task
behavioral1
Sample
Project_Report.doc.exe
Resource
win7-20240220-en
General
-
Target
Project_Report.doc.exe
-
Size
5.4MB
-
MD5
732fe8f52f0a0148ea21c44de7e88280
-
SHA1
b1d49316eb51edf4d893e6a507380fb6120ec12b
-
SHA256
f093599ef86e307ed0af24588b6e09c4ef2ff4f6762ca53c85db2bda0f916450
-
SHA512
9401bc5780848288bb2569f8098738a279dbf338ea95ee9ba30b1607fc379b74e37303f06df5299849df70c433b8a9cf4a6ab8b13a31a590b03179e55d15c6a0
-
SSDEEP
98304:zqBDbyXVFICDtPfeE/jowPKzA0xZRdp3zi5u5D41fopr26/Y1C/aYrS7ah7C5Thj:zSDGXVFICteErowCzlxZV3Gu5D4S26/a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Project_Report.doc.exe
Files
-
Project_Report.doc.exe.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
powershell1.pyc