Behavioral task
behavioral1
Sample
59a6d66d754f0758ed04c3c2166cf901bdebfa737e051f6acf7c7e5d87772c05.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
59a6d66d754f0758ed04c3c2166cf901bdebfa737e051f6acf7c7e5d87772c05.exe
Resource
win10v2004-20230915-en
General
-
Target
59a6d66d754f0758ed04c3c2166cf901bdebfa737e051f6acf7c7e5d87772c05
-
Size
1.3MB
-
MD5
bf50fc2c5f3425746d873914edd38452
-
SHA1
69fba1887d482b88855f1f1235079180c4ed24bb
-
SHA256
59a6d66d754f0758ed04c3c2166cf901bdebfa737e051f6acf7c7e5d87772c05
-
SHA512
c1bd1ee2e31e6249b42eae05dadb99040477cf9766e4ea43af193feb60ff69ebd944ec30bd1a2463dc3c7524bccccfa3820911d5798d55ddcb37471de8bbaa1c
-
SSDEEP
24576:II0OWDMRhIGbBRpMS05OMgNi9SFP+j7WSIX1c928UlLLwHV2pH6vFi:II0OSMRdbzpZ54Bj6SIXu28wwHVuHEF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a6d66d754f0758ed04c3c2166cf901bdebfa737e051f6acf7c7e5d87772c05
Files
-
59a6d66d754f0758ed04c3c2166cf901bdebfa737e051f6acf7c7e5d87772c05.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE