Behavioral task
behavioral1
Sample
599806156ae37a3fa6413bec5c5942dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
599806156ae37a3fa6413bec5c5942dc.exe
Resource
win10v2004-20231215-en
General
-
Target
599806156ae37a3fa6413bec5c5942dc
-
Size
1.8MB
-
MD5
599806156ae37a3fa6413bec5c5942dc
-
SHA1
83c0cc24d43e5e29bdf532fb25de2be7cca824b0
-
SHA256
3fbe77829839ddd3a0ed54b33e827d3e047621d5e9ee62095a152204ce64865b
-
SHA512
42f16eab5a15a03fdf120d3621c001c36e4e00be25d6ee1291f4e7c496c54a28e749b591467ca5ae5d7c42344c5d041911a2f23e005ccdd67682578fb75928c2
-
SSDEEP
49152:5qT/mL1FEpt3iNePYF9hmoDmT9UxJ23O5ka1qL:5cmL8usZoi9w+E5C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 599806156ae37a3fa6413bec5c5942dc
Files
-
599806156ae37a3fa6413bec5c5942dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�)� Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE