Behavioral task
behavioral1
Sample
598690b391ee41275e4b74cf489957d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
598690b391ee41275e4b74cf489957d6.exe
Resource
win10v2004-20231215-en
General
-
Target
598690b391ee41275e4b74cf489957d6
-
Size
2.9MB
-
MD5
598690b391ee41275e4b74cf489957d6
-
SHA1
583ff0ea506a13a284c663b5269f883adcf18d28
-
SHA256
87fd00cb61eda7589911d1fc10a48bd448ad132f224496148cb45f5d984cde45
-
SHA512
dc7d926325520b7917575858d6521a7e77fa006ab543687929e631a02e135cc98caba64791d643e95c06749a11cf921f68426f775f538f0158c1a7ea3cb5d4a1
-
SSDEEP
49152:nCqkz4CTzRfksrxSRoPuYJzHvOOQbFlcWP4M338dB2IBlGuuDVUsdxxjeQZwxPY1:dU4KzRM8WoGKiOQJlcWgg3gnl/IVUs1h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 598690b391ee41275e4b74cf489957d6
Files
-
598690b391ee41275e4b74cf489957d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE