Behavioral task
behavioral1
Sample
594f577342a9f0c4d540ba6ebf916edb.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
594f577342a9f0c4d540ba6ebf916edb.exe
Resource
win10v2004-20231215-en
General
-
Target
594f577342a9f0c4d540ba6ebf916edb
-
Size
784KB
-
MD5
594f577342a9f0c4d540ba6ebf916edb
-
SHA1
e17e8b9e19407b426755df1e5ece394f47c52bfb
-
SHA256
66380191d72cec9ba4a2d589edb23cf0009c497cf56f92138f6237505064fcd6
-
SHA512
554f70fcd7deb7548b9342c0ba3ecd69cb0588fc02534cb9592b60f6a6aebc352d8d97baa60115638e90085b96f332aa15c14c679275a61b3d653bb510131195
-
SSDEEP
24576:+LechapVMcIGM8bpx28nutaWIUwExZ0h92jlX5s5:frMqM8FY8utYUfg9Ik5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 594f577342a9f0c4d540ba6ebf916edb
Files
-
594f577342a9f0c4d540ba6ebf916edb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE