Behavioral task
behavioral1
Sample
98039a4a7d09cca5861407de7da9f31f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98039a4a7d09cca5861407de7da9f31f.exe
Resource
win10v2004-20231222-en
General
-
Target
98039a4a7d09cca5861407de7da9f31f
-
Size
543KB
-
MD5
98039a4a7d09cca5861407de7da9f31f
-
SHA1
ba578a98fa1bc3a187463bc229e375749eb32e2b
-
SHA256
460f554dfa5bed8062a173dca7f62d9fb03c4d2b360b0ca30ff9c10981d32923
-
SHA512
a1b3e6600a06d19469a33e1fd5acc9e29fee8b300322c2206fdd1d595b7afb1105c7394151f4b51ea40b29a642ea35005fe72088d32d316921526f43d9b7413d
-
SSDEEP
6144:Um8tSjMcCFgjGFF2OpG1pmyi1jHetjJDIu8ubn7ZXi1vSnCUCUHpsZGYSGM:UmBegjGFrg1mqZXQqCU/psZGUM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98039a4a7d09cca5861407de7da9f31f
Files
-
98039a4a7d09cca5861407de7da9f31f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE