Behavioral task
behavioral1
Sample
999e0db4931481c1f4a6638021e73121.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
999e0db4931481c1f4a6638021e73121.exe
Resource
win10v2004-20231215-en
General
-
Target
999e0db4931481c1f4a6638021e73121
-
Size
2.6MB
-
MD5
999e0db4931481c1f4a6638021e73121
-
SHA1
b71a3563a6be8629b5f4d51f5668a9568c98e515
-
SHA256
8c6419fe11125360015426317092dbef0afe3e2c6413763b8e820d58b7deb854
-
SHA512
cf5776ad2c1948a0ed84fc4c881835dc837d234ed357bd65b3a61041bc0c19b5d8266c0ac3f43273ef3947f9687e1e4bfcc23a142c5b68748474e63d5df34ce2
-
SSDEEP
49152:8jLGKtT/9XSlWfQdeiIYwacs2kTELwXxWze0LoEGay3:i3moNkxLT3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 999e0db4931481c1f4a6638021e73121
Files
-
999e0db4931481c1f4a6638021e73121.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE