Behavioral task
behavioral1
Sample
98fef18b48ab205d5ab403d4bd945f94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98fef18b48ab205d5ab403d4bd945f94.exe
Resource
win10v2004-20231215-en
General
-
Target
98fef18b48ab205d5ab403d4bd945f94
-
Size
5.3MB
-
MD5
98fef18b48ab205d5ab403d4bd945f94
-
SHA1
af7456f51401ee97192966ae6eb6d57c26ef0209
-
SHA256
42b44152cf89a6b92b4328d6a014dd7d75a0796b976950b9f79c80101759f466
-
SHA512
8c03af151fe1ddf66395643eb7851fd2fe089c828fb7b1e5a6b95928771b9b319d982302e861d84bd6ad6bd525759a0b93e2d75072c34d96d5eef400c68159d6
-
SSDEEP
98304:c4CXtW+jCFz84DIHqaBxU4NrVH2W2+Gu+MWkKQY72HqaBxU4NrVHj:c4CXttOFz84cX/TVMTuxrX/TVD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98fef18b48ab205d5ab403d4bd945f94
Files
-
98fef18b48ab205d5ab403d4bd945f94.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE