Behavioral task
behavioral1
Sample
59a8244b67c29896b3093ce07af0ea27.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
59a8244b67c29896b3093ce07af0ea27.exe
Resource
win10v2004-20231215-en
General
-
Target
59a8244b67c29896b3093ce07af0ea27
-
Size
5.1MB
-
MD5
59a8244b67c29896b3093ce07af0ea27
-
SHA1
a0f9f92c9fc392c34babb7754457b34ea387501f
-
SHA256
f871533707c71a7f7110527e6395498c82e72cae2a367e9c56113d805baf9093
-
SHA512
4b7479a7dc4c6e7d5bbc3e30c15f31dfd41a9379487d02eb71864ff9cb2c72c5907545593c0f36f3732386e3f71202e2bce0cd8256abd9ef6ba3c9923eabd695
-
SSDEEP
49152:hJWMfBU6UUs8admaGGQ7aOjYlzI5o8ebp5kaL+CO36hehay35bkrfg8FYri+ts5W:B3fsij28V330g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a8244b67c29896b3093ce07af0ea27
Files
-
59a8244b67c29896b3093ce07af0ea27.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE