Behavioral task
behavioral1
Sample
7e54477247e89a0a256be55b502094614d0da0d690cf2128e5b138d881914a92.exe
Resource
win7-20240903-en
General
-
Target
7e54477247e89a0a256be55b502094614d0da0d690cf2128e5b138d881914a92
-
Size
146KB
-
MD5
a3c9c7fd7f7e5150b86f8ce236b215e8
-
SHA1
29961380faa9fce53c47380e7c4b088a055c0cf0
-
SHA256
7e54477247e89a0a256be55b502094614d0da0d690cf2128e5b138d881914a92
-
SHA512
7c88b0b4327b36f0ce5a25c86164ddad9c2737103d8fa4160d336618f9ce558c721c4550ea3142d8ad90cb15b9515bb8436b33a335addcf1bd87650b9170907d
-
SSDEEP
3072:fnyiQSo7ZNbWlW00HSXIBlf08qySzCeHbk:KiQSo/kHo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e54477247e89a0a256be55b502094614d0da0d690cf2128e5b138d881914a92
Files
-
7e54477247e89a0a256be55b502094614d0da0d690cf2128e5b138d881914a92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE