Behavioral task
behavioral1
Sample
d7cc0f03b25cb7ffcea2d9e47cc66cd0bb8487efd3be21947aef6d6bef9ebb24.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d7cc0f03b25cb7ffcea2d9e47cc66cd0bb8487efd3be21947aef6d6bef9ebb24.exe
Resource
win10v2004-20240802-en
General
-
Target
d7cc0f03b25cb7ffcea2d9e47cc66cd0bb8487efd3be21947aef6d6bef9ebb24
-
Size
87KB
-
MD5
c0ddf600272f77e2becfb9b3f64ae483
-
SHA1
d7dffc7fb7a47750386447a68daf17f67a6bf41e
-
SHA256
d7cc0f03b25cb7ffcea2d9e47cc66cd0bb8487efd3be21947aef6d6bef9ebb24
-
SHA512
9fa0f5c7ca9d79bc70a4c1edc970ee95e5d0176c1e4a5ab07cfb6981e49b39cd7dc331c7d8dc6238f4d737505776ca065206acb109f8e207d73ed126e14c6be9
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyoKIKMPTW7JJZENTNyoKIKMd:fny1tE5KIKvtE5KIKG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7cc0f03b25cb7ffcea2d9e47cc66cd0bb8487efd3be21947aef6d6bef9ebb24
Files
-
d7cc0f03b25cb7ffcea2d9e47cc66cd0bb8487efd3be21947aef6d6bef9ebb24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE