Behavioral task
behavioral1
Sample
59cf0dee3e5ea5addd1928ca053b8558.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59cf0dee3e5ea5addd1928ca053b8558.exe
Resource
win10v2004-20231222-en
General
-
Target
59cf0dee3e5ea5addd1928ca053b8558
-
Size
452KB
-
MD5
59cf0dee3e5ea5addd1928ca053b8558
-
SHA1
d64af55d9d0185beb3db66d88d4b13c73235a5b5
-
SHA256
b0c865db217776e82a15df78d7eee1b14494e74005aeee7ed7cf97b3c3a8f6fe
-
SHA512
4b29f5728cbe607dba63a9f654e290f65dca4eeaa700a55e04bd268b2e7818f044398e588872ef9ff24c74d089fca1bc91ee1e9dcb0233e97b32f47f560594a5
-
SSDEEP
6144:+5DWFoYGTcW34hmGkvjXf0HY/eSAaqnOoZLjmFgrLGGZFtOJymojvG:+5DWGTNObeB/qnOoZLCCryGZyJCe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59cf0dee3e5ea5addd1928ca053b8558
Files
-
59cf0dee3e5ea5addd1928ca053b8558.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE