Behavioral task
behavioral1
Sample
99e62b1404b4505f8fd345610635c300N.exe
Resource
win7-20240708-en
General
-
Target
99e62b1404b4505f8fd345610635c300N.exe
-
Size
140KB
-
MD5
99e62b1404b4505f8fd345610635c300
-
SHA1
282346f66887bf2a17708590d7be10d3435320d5
-
SHA256
ecfce73e231777478873edfdc66ed3d66f43e6a48f8a74232e04fc490a4bdd15
-
SHA512
d75ec5a933883371235a2e25812db33d2be2823ac83d3897ed826602ff1700ad1bfd3137eb3ffd7cd0478364f4cbf39c8f35635a85ba3f5ad85c5141edcb952b
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BfDKPeGrR+i:kcm4FmowdHoSphraHcpOaKHci
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99e62b1404b4505f8fd345610635c300N.exe
Files
-
99e62b1404b4505f8fd345610635c300N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE