Behavioral task
behavioral1
Sample
59063fe6b9f5f0f1fd8bc15e3847d6fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59063fe6b9f5f0f1fd8bc15e3847d6fe.exe
Resource
win10v2004-20231215-en
General
-
Target
59063fe6b9f5f0f1fd8bc15e3847d6fe
-
Size
22KB
-
MD5
59063fe6b9f5f0f1fd8bc15e3847d6fe
-
SHA1
8aea573ad23ef9705b60a79bb90cc5dd7c0a9a41
-
SHA256
b1cdbfd61bd8256c451497666f055b2cfe9bc60c7ed28c4fb899f260c0a4ee8f
-
SHA512
a94c92e23fa417abf773ce9bae429b46996eb685cfaece7d55c9dd51cda9973086d69ba41df9b64a3cf02c5a4e54baf852131a52191673ebcf63fc578f9aa41f
-
SSDEEP
384:30qLjhV2lGUdUWhtoKjkRPZebiOhZneqcg5H+n68JezJ:Hz2lNUWDotNZn8Qx2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59063fe6b9f5f0f1fd8bc15e3847d6fe
Files
-
59063fe6b9f5f0f1fd8bc15e3847d6fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE