Behavioral task
behavioral1
Sample
99273f031a1703324a3dd73052496a5b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99273f031a1703324a3dd73052496a5b.exe
Resource
win10v2004-20231215-en
General
-
Target
99273f031a1703324a3dd73052496a5b
-
Size
1.6MB
-
MD5
99273f031a1703324a3dd73052496a5b
-
SHA1
c2e9e5cba8264e40724b3857b70773f1af957be7
-
SHA256
2311cce945ae5c14c4b4156f1cf40b7b635879fc4482aca8dc277cb9c55f4f90
-
SHA512
6eb5275673fdcca79454c43bab4166dc1bfe9f4601322c7c58b3789fe21e718baf2da2a158f9569f1d4564636c19c84f1c78563c7e240ea2003711ea824504fc
-
SSDEEP
49152:f1F4MZiR40OIWacakLz0YIzH15jsfWXYi1JBcakLz0O:f1F4MZiR4pIWacakcYAH15jyWIi1JBcp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99273f031a1703324a3dd73052496a5b
Files
-
99273f031a1703324a3dd73052496a5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE