Behavioral task
behavioral1
Sample
499a97d890577c5ff1e12da1f0819bae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
499a97d890577c5ff1e12da1f0819bae.exe
Resource
win10v2004-20231215-en
General
-
Target
499a97d890577c5ff1e12da1f0819bae
-
Size
1.8MB
-
MD5
499a97d890577c5ff1e12da1f0819bae
-
SHA1
4b06b6af6b116f7803bab21f1c4378a4d776fb64
-
SHA256
8c7a426d52a01b2fb653e54cbd0b88efb3029b232f877f6f118c42687c122c83
-
SHA512
2465308325250618de55d16268f9de2666df4e36f6dc9d662eba3e714c49d3d7d2ae3e2927d3c6ba2563f039b24c0403630f9b76451378b31bbcbcb41ef6deb4
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH8:SCqm2Jpr0nNM7Dus7Nx2c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 499a97d890577c5ff1e12da1f0819bae
Files
-
499a97d890577c5ff1e12da1f0819bae.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE