Behavioral task
behavioral1
Sample
7e2feb6889cfa8bf7d63feb869de0070N.exe
Resource
win7-20240729-en
General
-
Target
7e2feb6889cfa8bf7d63feb869de0070N.exe
-
Size
722KB
-
MD5
7e2feb6889cfa8bf7d63feb869de0070
-
SHA1
f264c80fc2fa45f30a36bb4041e88e04a490fc44
-
SHA256
2c4ece7e9c06f43680000d3b55e436c294419c3ee1c0657ad4c0989f1f8f444f
-
SHA512
6c1582bc824c6b1982cb0415b5c4d4b7cf689ad1dc04d3327412445161b606544b8f993bb4a2431c99536a73dffcb1bf881d1827d0e98c9c52357067e81b8334
-
SSDEEP
12288:HRZMuZcQvs/D0tTakmWxmb7hGfaGDYixJi0C0wGv4pY9Izvticof/Ia5DFeCUzI3:HMuZcQvs/D0tTakmWxmb7hGfaGVi0C0b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e2feb6889cfa8bf7d63feb869de0070N.exe
Files
-
7e2feb6889cfa8bf7d63feb869de0070N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE