Behavioral task
behavioral1
Sample
7e41fa3441f2e8d881dbd4393ed9ee102a562f3f7be0da486f995604a379710a.exe
Resource
win7-20240708-en
General
-
Target
7e41fa3441f2e8d881dbd4393ed9ee102a562f3f7be0da486f995604a379710a
-
Size
774KB
-
MD5
b65eb6d5fdc22ae7afeb94c69bfe382d
-
SHA1
e5f5083ce3b4c1acd3ec3242239566e533899f99
-
SHA256
7e41fa3441f2e8d881dbd4393ed9ee102a562f3f7be0da486f995604a379710a
-
SHA512
289f5040126f4464d0cff3cae030f883abab9a150413b55d39c9f188a9b79693bdecd117bb4e23a1156fdcfd7ec24a9e6b82f4e580656db981bd2926e1898e11
-
SSDEEP
24576:d52qasfDuyc2Da7eLB6WtWyn+RGjQ9A2I4sIrEH7PFp:d52XsK+/Wyn+R1u77
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e41fa3441f2e8d881dbd4393ed9ee102a562f3f7be0da486f995604a379710a
Files
-
7e41fa3441f2e8d881dbd4393ed9ee102a562f3f7be0da486f995604a379710a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE