Behavioral task
behavioral1
Sample
997bbfe3e75250cac79136ba20462ee9.exe
Resource
win7-20231215-en
General
-
Target
997bbfe3e75250cac79136ba20462ee9
-
Size
347KB
-
MD5
997bbfe3e75250cac79136ba20462ee9
-
SHA1
fca0b44238e2776774cf18b1945ee077cbdd30c5
-
SHA256
3a82e0f167727065cd3d1662e3791c9000c25132fccb6df86a68f82b553e66ea
-
SHA512
e0337e1e8bf45496b81f879663d5b7c737b9037ac72f6ef94219736520b3586382a8cf50ba4f677a5646bfd05550d077d4320bfb515d17a0ff5d9221c27914b1
-
SSDEEP
6144:/3sjxxG8qrLUC9awd4gxBWfLZbSfNzRyBSmx9+Ff3CGRxW0HTj1SkD01DEkXge9:/8lax9TcfLofNgB1ziB5D0eSP9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 997bbfe3e75250cac79136ba20462ee9
Files
-
997bbfe3e75250cac79136ba20462ee9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE