Behavioral task
behavioral1
Sample
59ae7c5cab45ee89efb962c1a5ed2bdc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59ae7c5cab45ee89efb962c1a5ed2bdc.exe
Resource
win10v2004-20231215-en
General
-
Target
59ae7c5cab45ee89efb962c1a5ed2bdc
-
Size
1.6MB
-
MD5
59ae7c5cab45ee89efb962c1a5ed2bdc
-
SHA1
713b7e5b083336cfa381c72f806511c8b093ab73
-
SHA256
dd40993fd29fe928d0b463bf0bb33ec029784b690358590e971ba0d7b480ce2d
-
SHA512
d41bea5b9b971b408b82f9a3d744385c191681e15d9cc41a6baa5694cceef0c1635f2b89be0c43b52f73c3c4c715f8f0c50b8958e52bd984467257d50bf854c4
-
SSDEEP
49152:mZM5MVqx8Z8c/VaZcakLz08LUPyDham6cPT3+T8cakLz0O:mZM5MV+s8c/VaZcakc8LUPuj6cPT3o82
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59ae7c5cab45ee89efb962c1a5ed2bdc
Files
-
59ae7c5cab45ee89efb962c1a5ed2bdc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE