Behavioral task
behavioral1
Sample
99d62544e65f853eae4c815b55557352.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99d62544e65f853eae4c815b55557352.exe
Resource
win10v2004-20231215-en
General
-
Target
99d62544e65f853eae4c815b55557352
-
Size
2.5MB
-
MD5
99d62544e65f853eae4c815b55557352
-
SHA1
5e6d89f87ae8711220847bc92bc1f8d912599d24
-
SHA256
d9d0b2c6d41c113ed46fcccaaf98b34b748f7126d3f4b4ae61f301f5622c77da
-
SHA512
f4dda561d07611e7f4d71a043065a0fb8c8753c2507258dfa648540ee425e8c7d3278be8e21abfde19790b0968a21be50595f11948d8173748c76a9c296732e0
-
SSDEEP
24576:3mYFYEHsCKUWFdn6Jqiqvlv9YSwgiALbpqZiW3+xf4pkWk8/Hs3wyaqJqsjmimDk:2YlaFNWF/Ihx7OH2GsjohT9cErKfd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99d62544e65f853eae4c815b55557352
Files
-
99d62544e65f853eae4c815b55557352.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE