Behavioral task
behavioral1
Sample
59d4177f7fad63dbea9cd4a0487844415eb4c19aff2984f99600eeb743de4146.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
59d4177f7fad63dbea9cd4a0487844415eb4c19aff2984f99600eeb743de4146.exe
Resource
win10v2004-20231025-en
General
-
Target
59d4177f7fad63dbea9cd4a0487844415eb4c19aff2984f99600eeb743de4146
-
Size
378KB
-
MD5
eb41408f07e7b8245034f3ae6374803f
-
SHA1
cba35e51f1f74bb2ebd135f7354a4049639a6fdb
-
SHA256
59d4177f7fad63dbea9cd4a0487844415eb4c19aff2984f99600eeb743de4146
-
SHA512
81003204316158252ab6462ba216e7aec6ac4e8f52494a2f2c932a0803f00df9a07cd81bdd5ad0f2ac64af45d213bb307cebceee3c89d4b35fcc0dc727724cbe
-
SSDEEP
6144:uoSseYQC0VcJZWE3t42aOts1v8scSx0gC7MmmAP0szepeaVfdYEv:uoSseYQC0VcJZWk4MS1v8sPxCAmmO0s4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59d4177f7fad63dbea9cd4a0487844415eb4c19aff2984f99600eeb743de4146
Files
-
59d4177f7fad63dbea9cd4a0487844415eb4c19aff2984f99600eeb743de4146.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 365KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE