Behavioral task
behavioral1
Sample
59e99ae7ddbb1bb8875f6fd071975975.exe
Resource
win7-20231215-en
General
-
Target
59e99ae7ddbb1bb8875f6fd071975975
-
Size
1.5MB
-
MD5
59e99ae7ddbb1bb8875f6fd071975975
-
SHA1
d4161ada2619d428f62b1cac81b0db5cc3307043
-
SHA256
9c57383186be08829e6bd424b0b4e451e2e787257cef22aeb4aa72dbffc1bdaa
-
SHA512
ceb5c38fc29537655fe1db43ce4f2c17c0a7565b38d0b472764ae0af7395b783a5466544891a94168a5d7c144c9df8b1279a9b3f12589f87744a591416278fa0
-
SSDEEP
49152:rWVoKRDYQ6JaDEBEjLx8jzZvvQw6o30RH:yo8sVJdajLx83hQwx0V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59e99ae7ddbb1bb8875f6fd071975975
Files
-
59e99ae7ddbb1bb8875f6fd071975975.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE