Behavioral task
behavioral1
Sample
98e94529022ed6051ed31ddd8804b310N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
98e94529022ed6051ed31ddd8804b310N.exe
Resource
win10v2004-20240802-en
General
-
Target
98e94529022ed6051ed31ddd8804b310N
-
Size
655KB
-
MD5
98e94529022ed6051ed31ddd8804b310
-
SHA1
7380032e7c6e6a910e0dd24fb748a3cadbc9c4eb
-
SHA256
3b2ed40b28438a9ff2ebba9b121354cfcb9ff59ff3702e01268a2a017005ee97
-
SHA512
073116a330a1ed7ce5458b64dd9f2c16f7e9dfc9ce0023de9215c97c0c992b514961cde7940268e168aaddadb737502913e723b9cc6490780c8b8ffe77fd99c7
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFb:1HNJDMor12mquPZjqt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98e94529022ed6051ed31ddd8804b310N
Files
-
98e94529022ed6051ed31ddd8804b310N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE