Behavioral task
behavioral1
Sample
99c5d7688931b57f9d6226db79b0e34fca2f33629207105ca69316f14afeb6c4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
99c5d7688931b57f9d6226db79b0e34fca2f33629207105ca69316f14afeb6c4.exe
Resource
win10v2004-20230915-en
General
-
Target
99c5d7688931b57f9d6226db79b0e34fca2f33629207105ca69316f14afeb6c4
-
Size
3.5MB
-
MD5
c2ad88a727751dce7c8b1e56521b74bd
-
SHA1
108bc8c650d3e805022a904eef1ad28f84b66bef
-
SHA256
99c5d7688931b57f9d6226db79b0e34fca2f33629207105ca69316f14afeb6c4
-
SHA512
8943d515bdbbf95bfef59a207f39b5d990dd016569261ba5a9ffe8577f4ba4a8ad3862723c404b9d9ba1556585e0d1162286890bbb6413c6467ec2576fa3af67
-
SSDEEP
98304:i0FXddbjiH0RaRB3047w0mWjpYZ9D8IE8l:i0RLbgFiwWjD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99c5d7688931b57f9d6226db79b0e34fca2f33629207105ca69316f14afeb6c4
Files
-
99c5d7688931b57f9d6226db79b0e34fca2f33629207105ca69316f14afeb6c4.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE