Behavioral task
behavioral1
Sample
99644ad8ca66b7c19d6ee1d7e0e6d2beec9db834bfb2377257672fb2bdc760c8N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
99644ad8ca66b7c19d6ee1d7e0e6d2beec9db834bfb2377257672fb2bdc760c8N.exe
Resource
win10v2004-20241007-en
General
-
Target
99644ad8ca66b7c19d6ee1d7e0e6d2beec9db834bfb2377257672fb2bdc760c8N.exe
-
Size
371KB
-
MD5
5ac2fd767a98de79013b2c31d6ecea70
-
SHA1
2ce015f764e413eb33cd43e31b6eb2016f3b9cb8
-
SHA256
99644ad8ca66b7c19d6ee1d7e0e6d2beec9db834bfb2377257672fb2bdc760c8
-
SHA512
e1582c94fac748b12eb31cf48bb97e5b4e48012be0142ac499d0a680bf94ba351b59a7f3f0b248bb839bf1e0a691844a950216e05f9520ea3c316a1e43ad09e6
-
SSDEEP
6144:Q1dbEi+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59CIHBV+UdvrEFp7hKU:QjQjrEN249AyE/rbaMct4bO2/VhBjvri
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99644ad8ca66b7c19d6ee1d7e0e6d2beec9db834bfb2377257672fb2bdc760c8N.exe
Files
-
99644ad8ca66b7c19d6ee1d7e0e6d2beec9db834bfb2377257672fb2bdc760c8N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE