Behavioral task
behavioral1
Sample
76481ea385f575190a86c93f8b9e3a6044f777f2e94b5f3f7a12f4bb1f33dcfb.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76481ea385f575190a86c93f8b9e3a6044f777f2e94b5f3f7a12f4bb1f33dcfb.exe
Resource
win10v2004-20240802-en
General
-
Target
76481ea385f575190a86c93f8b9e3a6044f777f2e94b5f3f7a12f4bb1f33dcfb
-
Size
7.4MB
-
MD5
f1b8ac8dbdd93a3a9eeae1f7272fd2f3
-
SHA1
f42b2fc74dfd9370727b08e99940f054abda3d32
-
SHA256
76481ea385f575190a86c93f8b9e3a6044f777f2e94b5f3f7a12f4bb1f33dcfb
-
SHA512
a18de7acc8f717f771544011169774bbda312358aea0ace6ff904ac3f6ee9fc827a7fd722e9840af51c123cb3f580913ba47eaef85b9b4d41641693d8334d1de
-
SSDEEP
196608:ChGj2hU+9p1W75NiC1K77t59kTBKKneNvrz2:rqhZXMNoC877f9ABKKneNjz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76481ea385f575190a86c93f8b9e3a6044f777f2e94b5f3f7a12f4bb1f33dcfb
Files
-
76481ea385f575190a86c93f8b9e3a6044f777f2e94b5f3f7a12f4bb1f33dcfb.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 22.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE