Behavioral task
behavioral1
Sample
991766225432d0c5ffb69b62d317ff6c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
991766225432d0c5ffb69b62d317ff6c.exe
Resource
win10v2004-20240226-en
General
-
Target
991766225432d0c5ffb69b62d317ff6c
-
Size
1.1MB
-
MD5
991766225432d0c5ffb69b62d317ff6c
-
SHA1
b02ef21f049bbe1d44728e820d80fc70c1450491
-
SHA256
db37119af67d36bc965f41cb7638a7f028f198b531fab45b11498f6dab4f6514
-
SHA512
666452fbe23f9a7a34f77932e936b7a54d0d9c9da61c10500503a8d07aadfb1991af6c6beb757d26f3ba0f0328f6c56c0e6aa9ac8c0936004fcf66b4ed2713b4
-
SSDEEP
24576:lUzOt+2dfEYDxTHvcjF+RxDrtFHaEuoUrNZzb/P3cYnTizzMm:+zOLpqjF+RxtFHzuoUJhn39T8L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 991766225432d0c5ffb69b62d317ff6c
Files
-
991766225432d0c5ffb69b62d317ff6c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE