Behavioral task
behavioral1
Sample
97b805a54458fc97cbd239156565ec7f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97b805a54458fc97cbd239156565ec7f.exe
Resource
win10v2004-20231215-en
General
-
Target
97b805a54458fc97cbd239156565ec7f
-
Size
16KB
-
MD5
97b805a54458fc97cbd239156565ec7f
-
SHA1
57b2c46cdec07a1bfcd16aff7369a65521b00bb9
-
SHA256
0b8113f93508e30c777a456949d3098aba254099b2d095c75ffe50d629b3de89
-
SHA512
efb68395240152d2e4f4ac764d8141aa818067ece7392f586b660c84be674bc87a78a8919b1c451392374e6e82ae217aa49ca75ed7c8d5c166cee7adf040a0e6
-
SSDEEP
384:evTq0ziFiGhAhqblZEBXDP53kZS1wG6cFR4rfgnP4hyap/vvi5U3:evTFWFiGhA4WTPdX1VLufvysia3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97b805a54458fc97cbd239156565ec7f
Files
-
97b805a54458fc97cbd239156565ec7f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE