Static task
static1
Behavioral task
behavioral1
Sample
PS99TradeDupe1.2.1_protected.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PS99TradeDupe1.2.1_protected.exe
Resource
win10v2004-20231215-en
General
-
Target
PS99TradeDupe1.2.1_protected.exe
-
Size
1.5MB
-
MD5
4a957d8830ba1f37f9b638198fd770d5
-
SHA1
fbd1c0f96b798ad43640f7ba84c379b8895b19ed
-
SHA256
31c72ac81996c76d4dbae811c5f0addbe1521f79d95b67eee1c311282825ba0d
-
SHA512
834ea994f2d90ed9795b1ce0016e1b0691b7999a73a6630c2036861e221f3c8b729ee0bb02208b0197d0d32aa36f60c5cfd8d83ed018d120b378fb6f8f657865
-
SSDEEP
49152:Zd/1pHJJzr3pN/253Xt2RwWhKX9p0kPjbIg:Zl1p3dB25392uWINp0kLbn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PS99TradeDupe1.2.1_protected.exe
Files
-
PS99TradeDupe1.2.1_protected.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 449KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b27eh9c Size: 906KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE