Behavioral task
behavioral1
Sample
58469c2a782751945e4fcddb1efc35d4.exe
Resource
win7-20231215-en
General
-
Target
58469c2a782751945e4fcddb1efc35d4
-
Size
1.5MB
-
MD5
58469c2a782751945e4fcddb1efc35d4
-
SHA1
ad11411d2f8df6e0eb1214b19e2aaf69586134c7
-
SHA256
585f9572162ad2e7c81896ba8db4b3de0aee198f1138ea60e37a361b2e4e7e96
-
SHA512
4ccbc3ef737a41499767474d2f0246252d6d0bd599d72aaf84b7e38aba53a0cb21b1f9f3f4b72fafc770ea40424bd2639f36becc865b30176107945a3af588fb
-
SSDEEP
49152:KIxnTJvNDGZUxeWecUQEUA/NAlSEfOpMkap0:1ntKWNEsSEf0C0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58469c2a782751945e4fcddb1efc35d4
Files
-
58469c2a782751945e4fcddb1efc35d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE