Behavioral task
behavioral1
Sample
7bbf5a58d814382f0f95bfc094c2b148dce4c412114df90265866eeeec0c7595N.exe
Resource
win7-20240903-en
General
-
Target
7bbf5a58d814382f0f95bfc094c2b148dce4c412114df90265866eeeec0c7595N
-
Size
331KB
-
MD5
99a3c701d53037103f7329a8722b3cf0
-
SHA1
91d60ef7bf570a26c1719ea0b422f2a2fc77ad8a
-
SHA256
7bbf5a58d814382f0f95bfc094c2b148dce4c412114df90265866eeeec0c7595
-
SHA512
6b265bd9ee59f56488af4b3aa3c385b1fa3760435185918c657c9470a94a19af1aa0b6cc590e571d495f89d6a15311601be8afa42beb85a8bbfc64fa8994601c
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbec:R4wFHoSHYHUrAwfMp3CDc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bbf5a58d814382f0f95bfc094c2b148dce4c412114df90265866eeeec0c7595N
Files
-
7bbf5a58d814382f0f95bfc094c2b148dce4c412114df90265866eeeec0c7595N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE