Behavioral task
behavioral1
Sample
98b4d713f01716ce9f390b992105b89d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98b4d713f01716ce9f390b992105b89d.exe
Resource
win10v2004-20231215-en
General
-
Target
98b4d713f01716ce9f390b992105b89d
-
Size
288KB
-
MD5
98b4d713f01716ce9f390b992105b89d
-
SHA1
4dafb9ed7dc15f07e744bd6edc24785eab856f30
-
SHA256
ccf136c6e7d50aa8812427545adf3ef7489f259397a3a45088f49414e1baaf8c
-
SHA512
358f805da4fb4c70f54068369979e06c0f8b623f3462eb1d603fa20f23ae68a39ca848033175a83faa5e42f906535ee7b62f0bcdeab5866565f3d306a9964bea
-
SSDEEP
3072:LiZkmJjIBpJHx6bHCqzf4NV1OQveGJO/E8jYn8lkQ1CRSIvcgjs6KPNACN6XzspG:W3R8Bq0NSQmG6tYnm8YI9U96jgp5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98b4d713f01716ce9f390b992105b89d
Files
-
98b4d713f01716ce9f390b992105b89d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE