Behavioral task
behavioral1
Sample
99732a2398a538caea9b8d55f7136b35b29d0879bd9b7b7a21faf8ba0fe0381d.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
99732a2398a538caea9b8d55f7136b35b29d0879bd9b7b7a21faf8ba0fe0381d.exe
Resource
win10v2004-20240802-en
General
-
Target
99732a2398a538caea9b8d55f7136b35b29d0879bd9b7b7a21faf8ba0fe0381d
-
Size
64KB
-
MD5
6479b1367f9b8ab1bb70863e6e86d4bd
-
SHA1
6f2df744b4fa7fa09783685f85e3683439a9d51c
-
SHA256
99732a2398a538caea9b8d55f7136b35b29d0879bd9b7b7a21faf8ba0fe0381d
-
SHA512
32f5f28b323ad493320e70c2906b6d52da115fdd24eeb67e6472d213e00b0f0fb2ac48d4632b23bf26d1a3149b8ad1ca369492f5419d1b9b35498b1b481b1e34
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiWkjkUJBn:V7Zf/FAxTWoJJ7TTQoQWkjkUJB2JBW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99732a2398a538caea9b8d55f7136b35b29d0879bd9b7b7a21faf8ba0fe0381d
Files
-
99732a2398a538caea9b8d55f7136b35b29d0879bd9b7b7a21faf8ba0fe0381d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE