Behavioral task
behavioral1
Sample
990871bf0b45673b08f129539ba1552059dc8e07a9c1ad281f5973aceb6a8209.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
990871bf0b45673b08f129539ba1552059dc8e07a9c1ad281f5973aceb6a8209.exe
Resource
win10v2004-20230703-en
General
-
Target
990871bf0b45673b08f129539ba1552059dc8e07a9c1ad281f5973aceb6a8209
-
Size
555KB
-
MD5
1067e1d35bad48dbe00b9a6b8d7fcd45
-
SHA1
39cfca17b8869812e20278f5e2178e7bec33ddc6
-
SHA256
990871bf0b45673b08f129539ba1552059dc8e07a9c1ad281f5973aceb6a8209
-
SHA512
ead853c5e5573ce8a50eb6709bb66c7dcfd2d5fce58bd5c67f37f69e9b4fa5d2f6afd9d6cd79a7a7db8e818a22ddfe8dfed7bbcae800009e86216980b20a0237
-
SSDEEP
12288:2BsHzOUNUSB/o5LsI1uwajJ5yvv1l2VwP/3E+:PiUmSB/o5d1ubcvki/3E+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 990871bf0b45673b08f129539ba1552059dc8e07a9c1ad281f5973aceb6a8209
Files
-
990871bf0b45673b08f129539ba1552059dc8e07a9c1ad281f5973aceb6a8209.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE