Behavioral task
behavioral1
Sample
2959b9a101535b2f54dcab35f906b4aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2959b9a101535b2f54dcab35f906b4aa.exe
Resource
win10v2004-20231222-en
General
-
Target
2959b9a101535b2f54dcab35f906b4aa
-
Size
125KB
-
MD5
2959b9a101535b2f54dcab35f906b4aa
-
SHA1
a1cf0074ec248998e8fd2986412a8b744663f9ef
-
SHA256
252687a77efa6fb4ce289c2c5c42caca0f1913a3fca2c36606552e8feb7217c2
-
SHA512
3546d1cfd4e26fb3ec784fe855c5bb564df44c409d62b805c254aa60340cd8137e49034fc675b7ec40a4328b7a0e47b281b58aaa8b8ccdc169e5ae603f0b1238
-
SSDEEP
1536:r3BCdc2o60hL9tgcb/4YSqDD5Z8NelMeV3jveunAfjfHGkrBJ5uvtGK:pZ96cD4OBZ8NGMeV3jvlnqtFulG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2959b9a101535b2f54dcab35f906b4aa
Files
-
2959b9a101535b2f54dcab35f906b4aa.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE