Behavioral task
behavioral1
Sample
98b1d298b81ddbb521f595a2585702eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98b1d298b81ddbb521f595a2585702eb.exe
Resource
win10v2004-20231215-en
General
-
Target
98b1d298b81ddbb521f595a2585702eb
-
Size
133KB
-
MD5
98b1d298b81ddbb521f595a2585702eb
-
SHA1
4952c49b05346e66c179642436b6bd53811052ee
-
SHA256
97afe5259d34cfb370e9add0a0104fe2e1c2a61a6077e6a854bf335d3d112615
-
SHA512
a797a44b6c3f3763877168723a71947d51f76a8ef9d738bb702fc8ef7201b780d48d5e33a4a6be23127d57155f61905115741758ddec40ec85fc6e9e447743b4
-
SSDEEP
3072:T8Mp1ukur/Veh+ccU2LbnOC6DqQpuawO8MaH4D7na3hEUHPQ:T8WxuLVeELjOrqBaY4DzaxEcQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98b1d298b81ddbb521f595a2585702eb
Files
-
98b1d298b81ddbb521f595a2585702eb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE