Behavioral task
behavioral1
Sample
97342f64784633cf3a2730455193779d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97342f64784633cf3a2730455193779d.exe
Resource
win10v2004-20231215-en
General
-
Target
97342f64784633cf3a2730455193779d
-
Size
125KB
-
MD5
97342f64784633cf3a2730455193779d
-
SHA1
0a8365f8857dc31361dac2d37f85429d5201c861
-
SHA256
098ee2f21432e91f2678e7d496663cc70cd201ccc1de8028867c003bef225875
-
SHA512
0345d23a674f9a47aed79d1529fcd1539816dd9073ed28bbfe10946d48980716c90e5ccc85c955b74fa96f5dbcbbce1b7e9171e39c90d24bc4ae191ddbf46680
-
SSDEEP
3072:s5L5+xxrbfCFDaiFmipL52A3h6rnXua1mGAOPp+0UBG9CYoutD:s5ClbfCxnoGd2dyaQdO9uG9CYoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97342f64784633cf3a2730455193779d
Files
-
97342f64784633cf3a2730455193779d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE