Behavioral task
behavioral1
Sample
99f1fd0697993f02cdeaa88483757ed0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99f1fd0697993f02cdeaa88483757ed0.exe
Resource
win10v2004-20231215-en
General
-
Target
99f1fd0697993f02cdeaa88483757ed0
-
Size
34KB
-
MD5
99f1fd0697993f02cdeaa88483757ed0
-
SHA1
2e7b63325d0e33922015dc85e54ca4ef0444eb9b
-
SHA256
b79f73e2435fd92b44d049afb78d2dc100519dfb58379cc353cba2e6854298b9
-
SHA512
998a2eb5fcc2b7db5ed5be8be282d5d926f26a13fc17d4b217893610c8fd1861a7f9658341c1d9e8cd95baa91034005a4145d3fbd1341639fd64ff2a9a10d7a8
-
SSDEEP
768:C6FND3GQONxB9HkfoK5EF5yBTk04xDvf5ZfdU5LdqvnbcuyD7UOr:C6F9GhLB2qTrDv+LdMnouy8O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99f1fd0697993f02cdeaa88483757ed0
Files
-
99f1fd0697993f02cdeaa88483757ed0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE