Behavioral task
behavioral1
Sample
97aaf6ac1fe628123c61caa8e423e799.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97aaf6ac1fe628123c61caa8e423e799.exe
Resource
win10v2004-20231215-en
General
-
Target
97aaf6ac1fe628123c61caa8e423e799
-
Size
136KB
-
MD5
97aaf6ac1fe628123c61caa8e423e799
-
SHA1
4a60d1088272a3076b994f5865b7b9fdd897e3bf
-
SHA256
1db1e88258d0aa86ba1928bddabd60e15cf29e0df40498d04dd746bd47340086
-
SHA512
102da0a917a221032d1a1c13d78019ab1e843ba44f88688d30a4155800d968f704d0ac7b0adb0b132430a09220d822ab836fbbefe4b3e6656d8b1d0c26293bc6
-
SSDEEP
1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhMa3KN2Y6L1V:blN9RkkkkkkTLJ0Y6L16M2o4ddTNCt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97aaf6ac1fe628123c61caa8e423e799
Files
-
97aaf6ac1fe628123c61caa8e423e799.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE