Behavioral task
behavioral1
Sample
d97c651d0f052a3926f842f75a4f6688.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d97c651d0f052a3926f842f75a4f6688.exe
Resource
win10v2004-20231215-en
General
-
Target
d97c651d0f052a3926f842f75a4f6688
-
Size
2.6MB
-
MD5
d97c651d0f052a3926f842f75a4f6688
-
SHA1
0271862fbb26683e973c376d0da2586294645962
-
SHA256
44e8ecfa1220655373f3146cbbbc6e6a129c245d53d6e9606c8f14bb77a51994
-
SHA512
452938e57b47f7089536654a4a8b4334a1ddf1e29a496a6300aa98464b587e98c1bfa2def4cd7d17d418892ec2ce684e09b4d7d46f9a47eafe599c70651630cf
-
SSDEEP
49152:8oMzX3lPvKikXqWW5t/BdQSBXENVz9d2+ia5day3:8oM59RBdu32w5d3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d97c651d0f052a3926f842f75a4f6688
Files
-
d97c651d0f052a3926f842f75a4f6688.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE