Behavioral task
behavioral1
Sample
fea59794e625505985a57e2a6bad0af5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fea59794e625505985a57e2a6bad0af5.exe
Resource
win10v2004-20231222-en
General
-
Target
fea59794e625505985a57e2a6bad0af5
-
Size
56KB
-
MD5
fea59794e625505985a57e2a6bad0af5
-
SHA1
596932071cdec56e00791821b5bbc98de1850801
-
SHA256
78b350edf85e9fd40ebe0d89de0307672a60e34a79d38305e9ec5c056c28d821
-
SHA512
017e1c876e85847640d6526a49c8c90397b179331f763592532c87a348bfda83f7dbb6faf5b98ce43791bc0dce695d43680bd42873711ebfe4bedf2a0b5da7cb
-
SSDEEP
1536:2A++pG8oumY7l6/Lyy8SbN6uoAmsItTl7lnYH2r8AtKYvT:r9G8WFezBT5lYAcY7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fea59794e625505985a57e2a6bad0af5
Files
-
fea59794e625505985a57e2a6bad0af5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE