Behavioral task
behavioral1
Sample
b98f64de56aee1681e787390339f7555b39d11042f5df94f201425cda038c97f.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
b98f64de56aee1681e787390339f7555b39d11042f5df94f201425cda038c97f.exe
Resource
win10v2004-20231025-en
General
-
Target
b98f64de56aee1681e787390339f7555b39d11042f5df94f201425cda038c97f
-
Size
27KB
-
MD5
d628afc971a765b6e8de78183d5479f4
-
SHA1
bc9abfe0fa9cdfcbd3d72119a101568d52834506
-
SHA256
b98f64de56aee1681e787390339f7555b39d11042f5df94f201425cda038c97f
-
SHA512
03d6771a4e5683bb5d7d58969737c03322adfe2714ed50d000f15a04022bec8b4dc60d252db4ec5b24718b2d78bab530cd949b24aaa51685109674fec92703e6
-
SSDEEP
192:0vxJqAPhpeS1ZK4O3CDHLJXzMZlmvl10GPdYPmVI+tTpXu7V80UqU4ubvRxK:6UAPkiMZlQ5P6d+tTZCv64uFQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98f64de56aee1681e787390339f7555b39d11042f5df94f201425cda038c97f
Files
-
b98f64de56aee1681e787390339f7555b39d11042f5df94f201425cda038c97f.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE