Behavioral task
behavioral1
Sample
59d964a779c1dd39401dff6f42c78d4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59d964a779c1dd39401dff6f42c78d4c.exe
Resource
win10v2004-20231222-en
General
-
Target
59d964a779c1dd39401dff6f42c78d4c
-
Size
2.4MB
-
MD5
59d964a779c1dd39401dff6f42c78d4c
-
SHA1
45b9e7eb9d8ae0cea2ab3e902e5db9b4b535cd92
-
SHA256
e2586fbee31a1db620150cbdf62e25b286599650eae2c2bf3539c70d771c0d6b
-
SHA512
dc829391ce7c72744557e66a165604f6f8b1779d23a0b1a96b4e221640ec00709119ccbcaa3e4d02cd02a3e69597397af12701372ad4ba46ea43bfe76fa33516
-
SSDEEP
49152:a0jfhN/3fpvv/l+3ydiHPNsTnS+d54hoHivzpg0TUGhRAK4F2gqVpAeuFLQPUC8p:aQJN/vpN+3ydAPmTPyoC7pg2UGh54F2M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59d964a779c1dd39401dff6f42c78d4c
Files
-
59d964a779c1dd39401dff6f42c78d4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 964KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE