Behavioral task
behavioral1
Sample
970f416cd27997b8870a182f50c0dff8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
970f416cd27997b8870a182f50c0dff8.exe
Resource
win10v2004-20231215-en
General
-
Target
970f416cd27997b8870a182f50c0dff8
-
Size
1.5MB
-
MD5
970f416cd27997b8870a182f50c0dff8
-
SHA1
df6c488ea9d7adbaac35e773fb844eaff2b5ece7
-
SHA256
5b908cafdcf31c06a161d0bf128fa2f37548e09a529d6a471adabad41eef48bc
-
SHA512
617bdbbcd78acf45b2b5fca83f89c8fb304ab180177fc91a40253743b8cc672e97d09feedf32b2b8734dcbf74d56e95704e56784a2b2d10d74b4163e05c75c62
-
SSDEEP
24576:ft/5Z9e0wWkSApcBCX7cjukL29pxWhecXMGiENDLZcjukL2Y:ftv9e0wPSApcBCX7cakLupxWh1PND1cl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 970f416cd27997b8870a182f50c0dff8
Files
-
970f416cd27997b8870a182f50c0dff8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE