Behavioral task
behavioral1
Sample
7f6c38f41b0826ae1471d4c7a313d0d0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7f6c38f41b0826ae1471d4c7a313d0d0N.exe
Resource
win10v2004-20240709-en
General
-
Target
7f6c38f41b0826ae1471d4c7a313d0d0N.exe
-
Size
466KB
-
MD5
7f6c38f41b0826ae1471d4c7a313d0d0
-
SHA1
488d138554bde4724881aab29d260ce50469376f
-
SHA256
ee982c30a8271c621b43777259562d7595c1718a724c6097d3f03ab2322d5a78
-
SHA512
a0d8eb522845070f45d41e04baab887e06473877b0a7e4df9e295c092c19210be598c9ece67c451cf88231fe1e1b8e5bde1e2ccb0564f82c082985ee637f27e0
-
SSDEEP
12288:xEQoS+qhYbG6fHHmSAqin+cdF2Vm/+5EiB8u62YwzG:xnYb7nmSA7+cf2EwDZ6pt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f6c38f41b0826ae1471d4c7a313d0d0N.exe
Files
-
7f6c38f41b0826ae1471d4c7a313d0d0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB