Behavioral task
behavioral1
Sample
59741711d588f2434a2773a20d075441.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59741711d588f2434a2773a20d075441.exe
Resource
win10v2004-20231215-en
General
-
Target
59741711d588f2434a2773a20d075441
-
Size
12KB
-
MD5
59741711d588f2434a2773a20d075441
-
SHA1
1c421ad73e89c7944e8044a572f9abb98d2aa4e9
-
SHA256
5ab8deaf17d58eb7991cd3a770592569e0f2134c6f56aa43cc4050a39157eaa9
-
SHA512
04b8a5cec569c6f80df5c2e0fe9c6cd9ade85caf8e412ff7e63d4414de7f677b7eb3f7b8b077bd23996a40bff3ee6820ed21bdbb587afb64f2c07c6aaa559acd
-
SSDEEP
192:YUeqeB7rAiST34dxrwW8H/bBW2nChMv2xakTGtQ2ZqEXAi4H/m/oq+:IVB7rfO3ul8fboFHxZTGtDqEX0H+/V+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 59741711d588f2434a2773a20d075441 unpack001/out.upx
Files
-
59741711d588f2434a2773a20d075441.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ