Behavioral task
behavioral1
Sample
59313646e6b051c58de0ba6faea30323.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
59313646e6b051c58de0ba6faea30323.exe
Resource
win10v2004-20231215-en
General
-
Target
59313646e6b051c58de0ba6faea30323
-
Size
2.7MB
-
MD5
59313646e6b051c58de0ba6faea30323
-
SHA1
4608f6b1753bef9ae2906584aa8a99421079e24b
-
SHA256
ad04fd440acc57c166d492589580b1b3c5bb38564270f4af668ed740649d374c
-
SHA512
1f437972e56fea2d917c4982ec36b5cce29924f094412d847a7bf10b1883f859ecd4b2482c17fe45ca454cb0896bfee0f9845407dd6ab1e276043063d1d3d7f0
-
SSDEEP
49152:32a/RRQo/xOgqt5sYa9dKcgNplCjqUW1OJHxcWTG5u5MaLd4kg:mmtZOgqt5sFdKcqlCaUJRcWa5V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59313646e6b051c58de0ba6faea30323
Files
-
59313646e6b051c58de0ba6faea30323.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE