Behavioral task
behavioral1
Sample
59888ee834cb2e08d9d1f7be6dcebbaa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59888ee834cb2e08d9d1f7be6dcebbaa.exe
Resource
win10v2004-20231222-en
General
-
Target
59888ee834cb2e08d9d1f7be6dcebbaa
-
Size
2KB
-
MD5
59888ee834cb2e08d9d1f7be6dcebbaa
-
SHA1
efde5634953280cf93ea49b110662d291c418663
-
SHA256
f120b27662a15b9596a19ee33164618b74d1b6339a8bad4d9c799aa67eaf5b2a
-
SHA512
3a821a0bbfc38ff9ea5a0d1a18dcf76cee67c0b8b047987809e75ac92fb83d7683ba54f0d3eee01158a0f2e7c94add538dbaa451ce84e9461356775363f664d0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59888ee834cb2e08d9d1f7be6dcebbaa
Files
-
59888ee834cb2e08d9d1f7be6dcebbaa.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE