Behavioral task
behavioral1
Sample
7912dc4a00594fc35f76583c793c9cd75600c7ef0949879b78d3f46f95fe02ff.exe
Resource
win7-20240903-en
General
-
Target
7912dc4a00594fc35f76583c793c9cd75600c7ef0949879b78d3f46f95fe02ff
-
Size
283KB
-
MD5
b6b77d1414e3203c624035a73547262b
-
SHA1
f7c58d8eb37e8c6bd9b3c0a73f1ec48e540fc9d8
-
SHA256
7912dc4a00594fc35f76583c793c9cd75600c7ef0949879b78d3f46f95fe02ff
-
SHA512
f143370a5b5c18ab1c643f20a4d4386d5c97c59aa85eb27252b19a5287050813212f8043913584062615e8328fba32cd47106018adb6de7776598b324b416f48
-
SSDEEP
1536:NU9abrtX4oocIK3yQkaY9z/S0hhnDiKKJqTnouy8HeBsCXKTnhxJz:Nm2rocIyhYtJxKJqrout+BsZhL
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7912dc4a00594fc35f76583c793c9cd75600c7ef0949879b78d3f46f95fe02ff
Files
-
7912dc4a00594fc35f76583c793c9cd75600c7ef0949879b78d3f46f95fe02ff.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE