Behavioral task
behavioral1
Sample
2097eb2d82f70818c7154fac2b6d8d60N.exe
Resource
win7-20240903-en
General
-
Target
2097eb2d82f70818c7154fac2b6d8d60N
-
Size
227KB
-
MD5
2097eb2d82f70818c7154fac2b6d8d60
-
SHA1
9e4683254b9b800c9b47a7c51e949466dd0043ea
-
SHA256
3c9e88d8b779668daa9cb7dcab756b76e9d231fb4f7ed3f21059f719d29bcbbe
-
SHA512
8497e77f2fddaf91c34b31e67251972c39b9b62e083ce0f040e653e32ad1322674af8130969a489f584b34eb0f82e5307c0ae35e435a9ed0a72293d9316ac05b
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKt3:jvw68XS8+d8HamysaZHRD44M3ZzF/GeZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2097eb2d82f70818c7154fac2b6d8d60N
Files
-
2097eb2d82f70818c7154fac2b6d8d60N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ