Behavioral task
behavioral1
Sample
b99871f9d319ca2300e4d65417e3522c36602d84c8e15496cb96ed1bbf9a7b90N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b99871f9d319ca2300e4d65417e3522c36602d84c8e15496cb96ed1bbf9a7b90N.exe
Resource
win10v2004-20241007-en
General
-
Target
b99871f9d319ca2300e4d65417e3522c36602d84c8e15496cb96ed1bbf9a7b90N
-
Size
1.1MB
-
MD5
833790d4fc106fecfc6bc3a20cb12f00
-
SHA1
f314a7c351fca192e82dd54ea811c2f48b4a642d
-
SHA256
b99871f9d319ca2300e4d65417e3522c36602d84c8e15496cb96ed1bbf9a7b90
-
SHA512
e8ed386de066e3f4e989d96da0083ecf68fef96c9eab175778cbbc0d6724257cca839e7c5ddae52c159e09b2f0151290d7747aa89f961c256c3bd7fb6d957533
-
SSDEEP
12288:HRxUzukXdE9qxj33vGPL5k4Omwh4UC1kCT9Y7tPMR:nUzukXdE9qxH4OPh4UC1kCT9u1K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b99871f9d319ca2300e4d65417e3522c36602d84c8e15496cb96ed1bbf9a7b90N
Files
-
b99871f9d319ca2300e4d65417e3522c36602d84c8e15496cb96ed1bbf9a7b90N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE