Behavioral task
behavioral1
Sample
99b1a06de7be455016dd8582db1aec17.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99b1a06de7be455016dd8582db1aec17.exe
Resource
win10v2004-20231222-en
General
-
Target
99b1a06de7be455016dd8582db1aec17
-
Size
353KB
-
MD5
99b1a06de7be455016dd8582db1aec17
-
SHA1
5284bbb7507a88f26a1fdb61a8452f646838a9bd
-
SHA256
e7506309c80d561096eea52c5c141b76ad477fe268b6d94d3a064eae97cac1af
-
SHA512
cc65ac95082ec866a76805155efdcbc52fa9cb056c7af35f58f2db709977773990f0744b6ac36f93589fb335f4e70b4c0c6bc35931ecac4da130d57729b0d0d3
-
SSDEEP
6144:K2d/dvgVABEykIdmF68vOmXkHp6B4rWYdxfsLPrPwo+:tdVZ5kIdmFDRUHp84rWYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99b1a06de7be455016dd8582db1aec17
Files
-
99b1a06de7be455016dd8582db1aec17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE