Behavioral task
behavioral1
Sample
999c0ae99a28c71a4d06b54c27358eb2.exe
Resource
win7-20231215-en
General
-
Target
999c0ae99a28c71a4d06b54c27358eb2
-
Size
1.5MB
-
MD5
999c0ae99a28c71a4d06b54c27358eb2
-
SHA1
004fb3580a1ad8ee7f0cf7724290ea2632295db3
-
SHA256
9f177eba3290a6e23b03c3f13cfb9192b8b0a55474f94e52a6c7f016638eb262
-
SHA512
c5279bd1a328a426508515e6b0de11b09a3d8e5adaad45a1c4e194a02aaca138959df8ce245e928952469093341a92f269381c8765e3ef5d89e4ab5eedcf1299
-
SSDEEP
49152:2yeoGBRsGfLd+gkkcIJeEq16NtevCt6ufea1b5P:2yevBGG5kaJeEQaiwr1p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 999c0ae99a28c71a4d06b54c27358eb2
Files
-
999c0ae99a28c71a4d06b54c27358eb2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE