Behavioral task
behavioral1
Sample
59bd03e330e381cf1565946583034b34.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
59bd03e330e381cf1565946583034b34.exe
Resource
win10v2004-20231215-en
General
-
Target
59bd03e330e381cf1565946583034b34
-
Size
784KB
-
MD5
59bd03e330e381cf1565946583034b34
-
SHA1
98a7232b38f14fa1775a399e2f3bd40cae8bb8cf
-
SHA256
1c3379aecb4c3e789f98032e7ba9fc336499dbed7306b46ffef3704f41247fbc
-
SHA512
7c10bfbce8e011d87c0bc409f2a2dc6d3b33e278cc2cbc0beb85b4cd6579d7e82323c2bc3472f6aa3f018a358e233ef06ba1e8639efcc65a32c643643558d26e
-
SSDEEP
12288:u+u1UdknSmbvIlcEoFbHkb0rAe+HeNnxOwhLU9BVxp6A1NEGUOufn8zg0yYv2uei:u3+duSUvMeZCfY92bxD2nOufX0t2uT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59bd03e330e381cf1565946583034b34
Files
-
59bd03e330e381cf1565946583034b34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE