Behavioral task
behavioral1
Sample
199404aa9aade113bc495338881812c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
199404aa9aade113bc495338881812c4.exe
Resource
win10v2004-20231222-en
General
-
Target
199404aa9aade113bc495338881812c4
-
Size
1003KB
-
MD5
199404aa9aade113bc495338881812c4
-
SHA1
654ab5ba4b745f29174fa4339f07509f5ac165d4
-
SHA256
35fcd5d3e5351fb0a18374d9592e6b0ff48b2d6cbf799cd9fb479d76edb663b1
-
SHA512
afd55a59d1a5741e063e34d88d8aa5fc60473fae46fb3c2c3774e415b07c641b8602f43a2e5f76323901923d436480a29d6ebb6d7c530b148aa7d2ba912048a2
-
SSDEEP
24576:ZzDJO/kcbTcXjivwCgGcjukL2CDYibq6/yqLNaF:9DinbwXj6wccakLz0ibq6yqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199404aa9aade113bc495338881812c4
Files
-
199404aa9aade113bc495338881812c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE