Behavioral task
behavioral1
Sample
58459dc8a082aa619f6c2885b9476f8b.exe
Resource
win7-20231215-en
General
-
Target
58459dc8a082aa619f6c2885b9476f8b
-
Size
212KB
-
MD5
58459dc8a082aa619f6c2885b9476f8b
-
SHA1
21e82634abf28340ae096368ef790a11b9d3f3e3
-
SHA256
8e5f5ee008bb5e1ad267e7eb845f77fdb8fbb06b7d36e31f3de992c91d9c7aa9
-
SHA512
9db40b7784f04b9ae3c186576c51ca525e0804d7945b45abb7451f1c72036eda244eac35fb66ca1b004931ebce10216b74a4c69b986daf0d4c3c40934e4f321f
-
SSDEEP
3072:TJacj8v7wQ+ZGx7w8wjjP8I1IU8RjrzzvUWAOZjfKdLIYP:TJPgv7wJZ87wBjYI1IUwrIOZy3P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58459dc8a082aa619f6c2885b9476f8b
Files
-
58459dc8a082aa619f6c2885b9476f8b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE