Behavioral task
behavioral1
Sample
99f12408a7a1a9b69efb4f4a472ec97c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99f12408a7a1a9b69efb4f4a472ec97c.exe
Resource
win10v2004-20231215-en
General
-
Target
99f12408a7a1a9b69efb4f4a472ec97c
-
Size
133KB
-
MD5
99f12408a7a1a9b69efb4f4a472ec97c
-
SHA1
bf9b2f9a4c3f7dd35f7ab8a2c6254f3462432c11
-
SHA256
672b77d38ea145fc1d8e55c8ce9855cd69a4b906627e98c027ca085bfeb548b3
-
SHA512
4028b499acc1b2107bbc644b42e13842701aa474284fce84e695e08e7de35e30411b5f71674ca17ace502f919735505ecdb57414784b9c6834105799f6f9b3fc
-
SSDEEP
3072:PzflShpObxM3Y3W9YBFn+iIPtHbkprvv8cMACS1Q:Pp8ioY3CYBFYdbkpDp1Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99f12408a7a1a9b69efb4f4a472ec97c
Files
-
99f12408a7a1a9b69efb4f4a472ec97c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE