Behavioral task
behavioral1
Sample
7ef503be6eacad2c4e5ff595989576d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7ef503be6eacad2c4e5ff595989576d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
7ef503be6eacad2c4e5ff595989576d0N.exe
-
Size
69KB
-
MD5
7ef503be6eacad2c4e5ff595989576d0
-
SHA1
0d7813f233ef7867ef8cc43f3f1706f60775a4fb
-
SHA256
ced8592f5a5d59ca4712da7db9ca3931cdeff4e06b23bbe8888b1008ce107f13
-
SHA512
0d09ed0d5b4c92247d1750b378743e9fa1c222fb34b8b5ec76c18099777f8bb539d768d4bdd2acbcd3f7be568c45027168e0193aae24076baff90d54f12afdcc
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCm:enaypQSoskV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ef503be6eacad2c4e5ff595989576d0N.exe
Files
-
7ef503be6eacad2c4e5ff595989576d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE