Behavioral task
behavioral1
Sample
559fad882f280eexeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
559fad882f280eexeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
559fad882f280eexeexeexeex.exe
-
Size
139KB
-
MD5
559fad882f280ed9fc010f5d0af818c5
-
SHA1
c1bfc4f54cbb4fa4aa29984e9389b224b5d79feb
-
SHA256
b4e975e4b9fcf8fc1bbd29426d85264f9d6519e3de622d32c95a3b723fe3381d
-
SHA512
8ba1dc94833aab0f058c564e7258ebbed6ab6b23b51d1782b6dd063fc49788ed3a61c0af0a3be99fab5677a02b94ab026a6d925f3f700e37298d1a8f2ee9798d
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GjZE:z6a+CdOOtEvwDpjczv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 559fad882f280eexeexeexeex.exe
Files
-
559fad882f280eexeexeexeex.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE