Behavioral task
behavioral1
Sample
7abee91c15155fb15d30e4b338261da0N.exe
Resource
win7-20240705-en
General
-
Target
7abee91c15155fb15d30e4b338261da0N.exe
-
Size
71KB
-
MD5
7abee91c15155fb15d30e4b338261da0
-
SHA1
291369f04539cf3b3f47244c116a4923878b15f6
-
SHA256
4b43adf765bea93e8fca1e7604bc59b6a3ef24527cc8d85a8afa15b8a808b4f2
-
SHA512
125e23604f13a830d22b6ddef3dba01a19da30d2ea859f59ba33b01f7fcea65879f58b0f964dfe1ea28d3e1dc05c6a223c1893a991676d7b2262831a30445286
-
SSDEEP
1536:CTW7JJZENTBRP5a46JOot2p3SBE09FX/S0Zgpqo9h2V4S3tuu60TSNKRXFwfL+SN:htEzWabRyQA07
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7abee91c15155fb15d30e4b338261da0N.exe unpack001/out.upx
Files
-
7abee91c15155fb15d30e4b338261da0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ