Behavioral task
behavioral1
Sample
f58e4e1aa62fa1334ac1fbfeedb6a209.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f58e4e1aa62fa1334ac1fbfeedb6a209.exe
Resource
win10v2004-20231215-en
General
-
Target
f58e4e1aa62fa1334ac1fbfeedb6a209
-
Size
5.8MB
-
MD5
f58e4e1aa62fa1334ac1fbfeedb6a209
-
SHA1
091679c217619146f165353b95f34e2dce09effd
-
SHA256
e09dd93ed23eff1a890161b2f1a41ca34563400c9b638c9c6124d99a7790c20b
-
SHA512
1ea148d356ad4cd9e8c8f3e3b3ed53835970c310acd6316b801f3ee24f7c516f828ae681b56651378f5a61621999bbb1e03d792c1478cf07ff5ef182f6516c23
-
SSDEEP
98304:DKVytdes+iW4F3WP35uygg3gnl/IVUs1jePsLeI0M3iSRbn0WbVkgg3gnl/IVUsn:DU4deW8Lgl/iBiP8zTRQWygl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58e4e1aa62fa1334ac1fbfeedb6a209
Files
-
f58e4e1aa62fa1334ac1fbfeedb6a209.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE