Behavioral task
behavioral1
Sample
59af31a987405c565237294a1eda1948.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59af31a987405c565237294a1eda1948.exe
Resource
win10v2004-20231215-en
General
-
Target
59af31a987405c565237294a1eda1948
-
Size
126KB
-
MD5
59af31a987405c565237294a1eda1948
-
SHA1
210902f2fc9660ab2174183ab24375178cb1a8c0
-
SHA256
b729fdac5f161348b3e843804635b1c6574d7a7483e8bbb62a7101f7e4da26fb
-
SHA512
43b0317155c8e511ba054ec9b7053d7f941e41e43cf7794b8e6745cfd82318c01e1cfbd0688e5efdfda8e59eb7669af9e37ca45589fc1fea93c2a7e8c5f2e1e5
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3Y5rDBZMkUIsGOIZjH4dC9ZRDh64:hGyGgrDBZPUWOo4dKg4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59af31a987405c565237294a1eda1948
Files
-
59af31a987405c565237294a1eda1948.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE