Behavioral task
behavioral1
Sample
59204a85277f26da6f842f68f7e6880a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59204a85277f26da6f842f68f7e6880a.exe
Resource
win10v2004-20231215-en
General
-
Target
59204a85277f26da6f842f68f7e6880a
-
Size
821KB
-
MD5
59204a85277f26da6f842f68f7e6880a
-
SHA1
158a43af132f076b5887c16ed710d35d3cff2d4d
-
SHA256
7df6f6b40a645e029d3b3b9cdabcd84768d943eabfbc18e620ab7773dc420d07
-
SHA512
1795de6eecf73fffe132dc8aad8015014ad0444a3dddc01e4f79981d56631e0c9f9370a9ee7ef96cbb31a8a2b0e48546f134b863d341e2c668eaef17ea4c1b96
-
SSDEEP
24576:epMoc0xRsno7nM+8MYMennhEnt3HiJ+cjukL2CDYO:IMoc0xKnojrzYrnnhEntRcakLz0O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59204a85277f26da6f842f68f7e6880a
Files
-
59204a85277f26da6f842f68f7e6880a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE