Behavioral task
behavioral1
Sample
7e7a7d82c1d4ed3d4d810132487bc4945faebc6e5601e32e6dcaacea4dcb9681.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7e7a7d82c1d4ed3d4d810132487bc4945faebc6e5601e32e6dcaacea4dcb9681.exe
Resource
win10v2004-20240802-en
General
-
Target
7e7a7d82c1d4ed3d4d810132487bc4945faebc6e5601e32e6dcaacea4dcb9681.exe
-
Size
4.4MB
-
MD5
756ccf497a4e5ab1d226636f87448f47
-
SHA1
803aace652b5792aa52b7c8f634de2f92dd4e175
-
SHA256
7e7a7d82c1d4ed3d4d810132487bc4945faebc6e5601e32e6dcaacea4dcb9681
-
SHA512
2a1fb88948aa4c7e2c3836c11980c0ed7973e75c714af6262b24b4002aaa93d2deb26c5398095546fd54d6628cd317a5f6fff04ff48ca1af9620c80a24ffea88
-
SSDEEP
98304:LNyz3VtoZS3Eby63B5J/0rwXXetznIG7IR2NvM5dz/9UN+Wc52ZKkwnTWwh:5yxQ6EO6x5J/0jEGcR2NUPQiUZKkwKwh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e7a7d82c1d4ed3d4d810132487bc4945faebc6e5601e32e6dcaacea4dcb9681.exe
Files
-
7e7a7d82c1d4ed3d4d810132487bc4945faebc6e5601e32e6dcaacea4dcb9681.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE