Behavioral task
behavioral1
Sample
97778700c25660e04960012477ad85fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97778700c25660e04960012477ad85fb.exe
Resource
win10v2004-20231215-en
General
-
Target
97778700c25660e04960012477ad85fb
-
Size
605KB
-
MD5
97778700c25660e04960012477ad85fb
-
SHA1
b4a485b3b6cab2f3ea16ce42179e23f9aaec787c
-
SHA256
2a7636071717def30789ef99d99f9100ac1df9777350b31982bf0527689faa12
-
SHA512
b09bd85a435169ec28f4c9cfae91f1293d6021b29750ad9d027ffb5d57077c22ef237e96a8697c594e81e450e03c9b19f1fcd110a0626f631d6bc7783a00ed12
-
SSDEEP
12288:l5EwMJocsy7sHb/EUOtNEUmWzuYrPVa+nbm:jRMJoc47/E3tNYEBRa+y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97778700c25660e04960012477ad85fb
Files
-
97778700c25660e04960012477ad85fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE