Behavioral task
behavioral1
Sample
97ba008a99822582fd6b8344b6e2228a8a39e13e8581f1355cb4acfcc7ad7d4e.exe
Resource
win7-20230220-en
General
-
Target
97ba008a99822582fd6b8344b6e2228a8a39e13e8581f1355cb4acfcc7ad7d4e
-
Size
4.3MB
-
MD5
129f42513f2df040bf1077c40cd8239c
-
SHA1
fa36c4925b1ef9820903f32ebf165b6f00a5f5db
-
SHA256
97ba008a99822582fd6b8344b6e2228a8a39e13e8581f1355cb4acfcc7ad7d4e
-
SHA512
d7e52bc7f750403f7cf90810e74f6d92ea89ad8a5b132153f39ff941f9792ebac0b6b2aedc980abbbd72b9048404f28826976b00cf03ec807f1012a2ce629fab
-
SSDEEP
98304:oYK3W2V93bo3nwohsjyqOtchJQA34+X5ETWD7k7wdTFzx/DB:oYK3W2zbo3nwoKjyqeqJP35sWD7k7Cxr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97ba008a99822582fd6b8344b6e2228a8a39e13e8581f1355cb4acfcc7ad7d4e
Files
-
97ba008a99822582fd6b8344b6e2228a8a39e13e8581f1355cb4acfcc7ad7d4e.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE