Behavioral task
behavioral1
Sample
58ffbdf708193f04943906816930c23f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58ffbdf708193f04943906816930c23f.exe
Resource
win10v2004-20231215-en
General
-
Target
58ffbdf708193f04943906816930c23f
-
Size
81KB
-
MD5
58ffbdf708193f04943906816930c23f
-
SHA1
7e21b76be03bd1238c04bcb82c257cec7a115fc5
-
SHA256
db26599b87c24203cddfb12705fd314f8a2e234e1232427f3cb7f397dd5f8219
-
SHA512
f9c340fdd091f79a34489c65c6ff0f7df65e0c4102978a84a44e01f377710a81d2f63bb68f845a5907b8e4b0a70d9cea6571bfc4fb26eae4d228d5a60f1a915d
-
SSDEEP
1536:VWKxujety1rpWPw2UpeNAJuov+kMc5OjAcv3xjMl76Nl5ljP5i+K6w:AKx9kxphdeNO3v+kMJv1MQN/JPoLB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58ffbdf708193f04943906816930c23f
Files
-
58ffbdf708193f04943906816930c23f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE