Behavioral task
behavioral1
Sample
992cee30969ec3faa4f1d5ae9aea91d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
992cee30969ec3faa4f1d5ae9aea91d2.exe
Resource
win10v2004-20231222-en
General
-
Target
992cee30969ec3faa4f1d5ae9aea91d2
-
Size
1.5MB
-
MD5
992cee30969ec3faa4f1d5ae9aea91d2
-
SHA1
7bb7265aad79c92e5cf0892f76428cc52c85a406
-
SHA256
0fb48bf7becdda402dd87db4f53cd5bb339a2edab63336d45826144e02e3ff56
-
SHA512
c9dd01ed428d22165bd5a0e4072715d87019f9c9b00f97856ed2aff827d29f5932f2b0801b241eebb8060d25cdb2f1a556954d380526b0e79aa577853ee5a334
-
SSDEEP
24576:pX4xWMcsgeofm+GEgPAB/aEE4i7Vb6o6MAw0bXj9zUsoA51QyWJKW:l6WpbfoPqaX6dMAJb5zUs/L7WJK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 992cee30969ec3faa4f1d5ae9aea91d2
Files
-
992cee30969ec3faa4f1d5ae9aea91d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE