Behavioral task
behavioral1
Sample
97a5bb57af93d94e307d79a1e65a575094797b884844bb5c18baad8d549a7109.exe
Resource
win7-20240729-en
General
-
Target
97a5bb57af93d94e307d79a1e65a575094797b884844bb5c18baad8d549a7109.exe
-
Size
142KB
-
MD5
d85e723e5943ab83a3945187ce79fa5c
-
SHA1
0f1691f8b0df2a9750270d3be24a88473283848f
-
SHA256
97a5bb57af93d94e307d79a1e65a575094797b884844bb5c18baad8d549a7109
-
SHA512
f7a71c29d383b260bdb3238bd32ccbe80f1acd95cc592a1a7db1ee7973cb41f2ceeb37f7990cf23cb1471a1dfd4cf8e666e3f90652d99191ade5e3a9299979f4
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BfDKPeGrR+i:kcm4FmowdHoSphraHcpOaKHci
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97a5bb57af93d94e307d79a1e65a575094797b884844bb5c18baad8d549a7109.exe
Files
-
97a5bb57af93d94e307d79a1e65a575094797b884844bb5c18baad8d549a7109.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE