Behavioral task
behavioral1
Sample
97ef6faca61e6ebfbd443d1b39651b72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97ef6faca61e6ebfbd443d1b39651b72.exe
Resource
win10v2004-20231215-en
General
-
Target
97ef6faca61e6ebfbd443d1b39651b72
-
Size
84KB
-
MD5
97ef6faca61e6ebfbd443d1b39651b72
-
SHA1
8910c0f486da34780eecea4b9f97265e73e3c61c
-
SHA256
e34a1524db8b17db30ea6439414ee2679841023997fde69ad35b2949754fe428
-
SHA512
2c6ac4d9b355d050c7defd8dc2f962c88edb13d7a0148ba532cb2b772e93f18fbdc767b54f592f09577ef3f39ee5a3413a901a140e9ca9b55f01707c1cc7fa52
-
SSDEEP
1536:sZn5PU1uBY4ZEh+qR93NtOpBJZF1/9xN4puKv41:25PU1uBY4ajOV1/9LKQ1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97ef6faca61e6ebfbd443d1b39651b72
Files
-
97ef6faca61e6ebfbd443d1b39651b72.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE