Behavioral task
behavioral1
Sample
058a0a9eddb411fb5c7270ac9356d378.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
058a0a9eddb411fb5c7270ac9356d378.exe
Resource
win10v2004-20231215-en
General
-
Target
058a0a9eddb411fb5c7270ac9356d378
-
Size
353KB
-
MD5
058a0a9eddb411fb5c7270ac9356d378
-
SHA1
123df5feb316bd115e0570465ea89839ea374beb
-
SHA256
48ba1429db0bb4efbebefb57513b0d6077a09bbddcb9a81b002103b1e176b1a8
-
SHA512
02ac8a12c46293a3160abd801879abdb323239b4fa7d72d39d72c98e50d8161f74d9f3e7f732201797b4f97e97544422987dc66753e7c7f5a427425cf1acfbbc
-
SSDEEP
6144:JYv1pshztTdFUZsWPEXcgU7BbcUAy6SBwZvbWCoBqKMYdxfsLPrPwo+:iv1pstT/UdPPgibc2EvbWCo4hYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058a0a9eddb411fb5c7270ac9356d378
Files
-
058a0a9eddb411fb5c7270ac9356d378.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE