Behavioral task
behavioral1
Sample
99cd9ef000109ff6416c99be57ddb363.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99cd9ef000109ff6416c99be57ddb363.exe
Resource
win10v2004-20231215-en
General
-
Target
99cd9ef000109ff6416c99be57ddb363
-
Size
2.7MB
-
MD5
99cd9ef000109ff6416c99be57ddb363
-
SHA1
b2ef3e102e9da3a0afaf9bcfa9c98f34b0c0d88d
-
SHA256
0e37e7a41512c3086b267b26f7347cf20736ac87d75cd9ccd5dea1f001a0bb6e
-
SHA512
a7b74ff699ae23b2cae79328e2cbf952563867ae12da1968a258dca5f6a9f0ebcdf956457fab9c38b29316abd0e428dd94361a55b1de3f5877b1b10b93dcf3b3
-
SSDEEP
49152:8C0hzoeiK1Z0FHT27v6Ppz4chiq7tj4TqxAnBJzkpFmMoGaKf:8Cezzw27spzYvHfcboGaK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99cd9ef000109ff6416c99be57ddb363
Files
-
99cd9ef000109ff6416c99be57ddb363.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE