Behavioral task
behavioral1
Sample
772a15fe0d9e560f0bb614ccae0d9390N.exe
Resource
win7-20240704-en
General
-
Target
772a15fe0d9e560f0bb614ccae0d9390N.exe
-
Size
386KB
-
MD5
772a15fe0d9e560f0bb614ccae0d9390
-
SHA1
7775d19c00eeb191f7e8cbbb7e33629c73f29f2d
-
SHA256
fba8ea4fa581c0c8addf50add60f7e8e48cfdb4d5908e7caaabbabe7279eaf2f
-
SHA512
7e78df28ad82a7de644a4de141f8b73dca77493b4da8228b231b04d01f651ce4029fec55c9da669363b0c67b4f52f3592557555cdc42744c0e7f7cc5ff54d94e
-
SSDEEP
12288:E+YcUc6SBLLTSEgBAnhc1kGsxQqxemT6OhJ:Ev2BLHSn6q1BnSJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 772a15fe0d9e560f0bb614ccae0d9390N.exe
Files
-
772a15fe0d9e560f0bb614ccae0d9390N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
agljhfr Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE