Behavioral task
behavioral1
Sample
59e5cf74b887fef7a256a8fb4cc8b68c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59e5cf74b887fef7a256a8fb4cc8b68c.exe
Resource
win10v2004-20231215-en
General
-
Target
59e5cf74b887fef7a256a8fb4cc8b68c
-
Size
29KB
-
MD5
59e5cf74b887fef7a256a8fb4cc8b68c
-
SHA1
3cff8dcdb1d97f82ec5fd625ed21689267731c06
-
SHA256
8635d50bfd395a7efef20aca8d33eddc24b78411978998f9c387ee14d5860b67
-
SHA512
ffff767e445f801f7a02cd0bbda3d5da4183b69d426041ba8aa840c2eead54a6983a1f8bbfa73fe7fd9df5c97864308cd2b19dced3ba86e1e11feae4c26daa05
-
SSDEEP
384:FkcO8d27CrGCeMhV29GYc9Lu1AvCxKnJkOPdJzowpknQi/cFfr5Y7O+M1RoQ2B:lO77CzVJLuOKar7cOknQi/qfr5Y9U2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 59e5cf74b887fef7a256a8fb4cc8b68c unpack001/out.upx
Files
-
59e5cf74b887fef7a256a8fb4cc8b68c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ