Behavioral task
behavioral1
Sample
97bd7f8c01f58e0af0a28548788ac7b0N.exe
Resource
win7-20240704-en
General
-
Target
97bd7f8c01f58e0af0a28548788ac7b0N.exe
-
Size
80KB
-
MD5
97bd7f8c01f58e0af0a28548788ac7b0
-
SHA1
92807443dec9bf49a03dcf07ed8c7a8491ba9737
-
SHA256
1619f7dfd5a94d1adfc7d5c72eca0cfb748506b3a8d71a3421319c6b98b17c6f
-
SHA512
dc212f5e27350f909cbadfb38fdad08aec0b096b8c9761463be13703acc318d1c1718d628cfdc18932d184c6f64587b298d706468a6b97d14a9e2bdd62dfcfcb
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCd+878:enaypQSoskqI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97bd7f8c01f58e0af0a28548788ac7b0N.exe
Files
-
97bd7f8c01f58e0af0a28548788ac7b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE