Behavioral task
behavioral1
Sample
1099948fcd2c9b52ee415192e6e2dc7e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1099948fcd2c9b52ee415192e6e2dc7e.exe
Resource
win10v2004-20231222-en
General
-
Target
1099948fcd2c9b52ee415192e6e2dc7e
-
Size
347KB
-
MD5
1099948fcd2c9b52ee415192e6e2dc7e
-
SHA1
7e60be191de227f23c8048d202d716feea387ab8
-
SHA256
9de6b7d8b74a3b483d0cfb3087eb83a90b9174ab2d355c30e883fb15bb4fa835
-
SHA512
710503bb8e3d52a561795ffc23cfc1861f5cdc7d010559bc5920bcbd38871c164b37598d0c12301535d4d52891734583afb2b83d7efd0b7cd4c3f2c9bddaff78
-
SSDEEP
6144:hGyGKhCO5ZC2hpo5XMFPa6tWRMYATx4NeLQ5kafY6UJ55EYdGxi/XDP:h3JhPvCf5XiRWG34NeLFa3YIKXDP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1099948fcd2c9b52ee415192e6e2dc7e
Files
-
1099948fcd2c9b52ee415192e6e2dc7e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE