Behavioral task
behavioral1
Sample
7798b08e0e4fd09c3f76fc1d10bcba90N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7798b08e0e4fd09c3f76fc1d10bcba90N.exe
Resource
win10v2004-20240709-en
General
-
Target
7798b08e0e4fd09c3f76fc1d10bcba90N.exe
-
Size
9.8MB
-
MD5
7798b08e0e4fd09c3f76fc1d10bcba90
-
SHA1
50fc3b14cec67bb637e63224f125efb99485c93e
-
SHA256
0f53f10138540db73b85585f0dca066e8c2309576f91766d034b6f13bb58678a
-
SHA512
f7fcf63972f638c10597d0ec0ea4fa2a2ff287aecac312201dd801428b4ff90226e6f09c5031003fd52ed19a2a155219ab9b40472fc3ed30aa985eb8d79c2a29
-
SSDEEP
196608:1ggggggggggggggggggggggggggggggggggggggggggggggm:1ggggggggggggggggggggggggggggggG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7798b08e0e4fd09c3f76fc1d10bcba90N.exe
Files
-
7798b08e0e4fd09c3f76fc1d10bcba90N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE