Behavioral task
behavioral1
Sample
59410dfb544ef3d2ca94870a1069506f.exe
Resource
win7-20231129-en
General
-
Target
59410dfb544ef3d2ca94870a1069506f
-
Size
34KB
-
MD5
59410dfb544ef3d2ca94870a1069506f
-
SHA1
c9be9d055a0efb0bdd6538590045a87abc58bcab
-
SHA256
56c1a976d70ab88924b51d41794ff3e33c504d2ef29d6e1c410ca6ae2262b3ff
-
SHA512
5e979874d79812737651b07d2ce954347b66e62fcdcbf62f1f2e88cf193ddc33b6be1b02013dbf0180b1c8e7f2910f809893c31d1d9b3adf86c9df3af454e8a3
-
SSDEEP
768:539znLzR58RSqdSLYp9k4p0queE3hTZ1Ffu+J7HdVJ:5tzhuzALIIqFE3hfF2+HdVJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 59410dfb544ef3d2ca94870a1069506f unpack001/out.upx
Files
-
59410dfb544ef3d2ca94870a1069506f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ