Behavioral task
behavioral1
Sample
99dcf4149779135a0ffb4fb9bf428d98.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99dcf4149779135a0ffb4fb9bf428d98.exe
Resource
win10v2004-20231215-en
General
-
Target
99dcf4149779135a0ffb4fb9bf428d98
-
Size
3.9MB
-
MD5
99dcf4149779135a0ffb4fb9bf428d98
-
SHA1
5abf5bb53dcace11fe2c2075dfa77d9ed0a611d1
-
SHA256
5bb7a7ba8715de285d2e6f6e84bd656ea0d82d056654a43d2488e5ce8e913897
-
SHA512
4c704b4aa08afe6111cec40cd9b68c6f4632a131002b7d2139e83f7dc6bc998abec64ca6a8084b22e461224d60ddced13755b05cd26cb348b519ce9b134504c9
-
SSDEEP
98304:Bvf23gVm4nZQhyND2i7D3xkOxYwpKvNpVdbQOD2i7D3xkOxYwpKqxco9mQD2i7DF:BXigvGAh7FkNqK5pzh7FkNqKq+o9Xh7h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99dcf4149779135a0ffb4fb9bf428d98
Files
-
99dcf4149779135a0ffb4fb9bf428d98.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE