Behavioral task
behavioral1
Sample
99bfacce7706ab8be99889ea11ae6a68.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
99bfacce7706ab8be99889ea11ae6a68.exe
Resource
win10v2004-20231215-en
General
-
Target
99bfacce7706ab8be99889ea11ae6a68
-
Size
29KB
-
MD5
99bfacce7706ab8be99889ea11ae6a68
-
SHA1
ae404bfb1c22c4bef1099780d9637ced88a1b7bb
-
SHA256
ac226506271b553c694e5ecb8324f4e9e054ab15c16252143cd84a08d683dbc2
-
SHA512
86e5c2f13fe24d40825241c04682fb02088d1071e0033de25b05189630f010fba36cdf08f7761c93482c1fd13e5c330e02ee9d30741ed360ba5b0258f64b62c9
-
SSDEEP
768:woEJfTwJMhu+lCvy9j/GyUM14hShqivB74l02oTGXfaLLPU+y93P:wDf0qI+jjOyDhbR4l02oKXSLLPU+y9f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99bfacce7706ab8be99889ea11ae6a68
Files
-
99bfacce7706ab8be99889ea11ae6a68.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE