Behavioral task
behavioral1
Sample
7e0bb2f2c28a34419c16651b964c58a0N.exe
Resource
win7-20240705-en
General
-
Target
7e0bb2f2c28a34419c16651b964c58a0N.exe
-
Size
151KB
-
MD5
7e0bb2f2c28a34419c16651b964c58a0
-
SHA1
4350a6d1197a7aa77ad9942116c16cf33c965dbc
-
SHA256
39d5dd2c667aca093ffad321edaa4468017e9a6c088e0e32959aaf727835f3ea
-
SHA512
0f7a82c3b4ecb8b6847d17f69d213395da3049fb82c951f33af5348d0b03c24fa8d8e8073ae3d120cca481666940d5b50879f99baf4271b3cc52c95acb1d81c2
-
SSDEEP
1536:V7Zf/FAxTWoJJ7T9TW7JJ7TSb8SjaYavUgJt8ynjorj9SvzpNzCbq9a1D/:fny1iGbgPvUgHz7zc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e0bb2f2c28a34419c16651b964c58a0N.exe
Files
-
7e0bb2f2c28a34419c16651b964c58a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE