Behavioral task
behavioral1
Sample
57659e4e26f8917e3fec66dd0a380f5a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57659e4e26f8917e3fec66dd0a380f5a.exe
Resource
win10v2004-20231215-en
General
-
Target
57659e4e26f8917e3fec66dd0a380f5a
-
Size
188KB
-
MD5
57659e4e26f8917e3fec66dd0a380f5a
-
SHA1
11a2e90118d3353423597694a7eb28de2f855d10
-
SHA256
35774c2d9b4ffda310dc9a4f48856d2ab66031fa9993843dc71f14f469e48de7
-
SHA512
a187bbc516546c867d0d3896ed42631337972769dc0bf3d829061c737b813e02cc0e679bae9a216ddc66d732bb4ed1fe48baaaeb20c6ee98cb61a03640c4198c
-
SSDEEP
3072:27QG53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q57K:wLHq0Z8k92iBSPoV+gRh8celb++0vvOh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57659e4e26f8917e3fec66dd0a380f5a
Files
-
57659e4e26f8917e3fec66dd0a380f5a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE