Behavioral task
behavioral1
Sample
39b5259d31def48cd57391a26c455752.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39b5259d31def48cd57391a26c455752.exe
Resource
win10v2004-20231215-en
General
-
Target
39b5259d31def48cd57391a26c455752
-
Size
10.2MB
-
MD5
39b5259d31def48cd57391a26c455752
-
SHA1
ca9771f6e3824264e1b63f1b3aa761d58f7d378b
-
SHA256
0ec4a8481641300a081319dc84a7e177a8f1f725fe1521a66238349a53e7bf35
-
SHA512
88c026a2d8ab82eb814782e256975a3e163d0b35894d13cb6f43680c14d1cde0950ae03ae3955997d20984b0b83254c988cf8ff873ced04264b723d629e90566
-
SSDEEP
98304:ZEszrbwh4dTKwsG3Ig5RBZvx9F3Fdq9E+N3Ig5RBZvx9F3:Z/f0h4dTBLvx9pUvx9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39b5259d31def48cd57391a26c455752
Files
-
39b5259d31def48cd57391a26c455752.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE