Behavioral task
behavioral1
Sample
97d44b460b3198900158cecbb4e161f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97d44b460b3198900158cecbb4e161f7.exe
Resource
win10v2004-20231215-en
General
-
Target
97d44b460b3198900158cecbb4e161f7
-
Size
3.9MB
-
MD5
97d44b460b3198900158cecbb4e161f7
-
SHA1
316dae95561ec581e85065b01e3fbffb32f9a21f
-
SHA256
9f1b1a2d806ed1c257f9ad9ea27ba224a8f7d6db5f4096d01766d6682e020e36
-
SHA512
8fa219110fb304ed5f5f16f3cec4ec363f765cfea014401b702a4c6f14d37aed73902f365dbb6a76ee25a2643ea80fec2c57252e3d87f6b55c0cca463e1986aa
-
SSDEEP
49152:CLERY8DAjARwlzthqHZdfdxc+jd5pfy97sG5G:6ERfsDodJjpfEG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97d44b460b3198900158cecbb4e161f7
Files
-
97d44b460b3198900158cecbb4e161f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE