Behavioral task
behavioral1
Sample
59f53d12f9fa40917d6ec69f4f242b70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59f53d12f9fa40917d6ec69f4f242b70.exe
Resource
win10v2004-20231215-en
General
-
Target
59f53d12f9fa40917d6ec69f4f242b70
-
Size
276KB
-
MD5
59f53d12f9fa40917d6ec69f4f242b70
-
SHA1
50f10ae739706335b7835e2d09cb768e78a11168
-
SHA256
3a111af05bc5bd1e981e1da899f3673ad84c429a1826ee4f92d9645fd046c3de
-
SHA512
fc64f5e7c596ed06916148e66b532cfcbddc51a1a38d8e631e8d754d954f6b9823b5cc98a939110cd0b3cc704c9aa13c917c5fd5d571a0f5c90c43ff58c31e04
-
SSDEEP
96:mkxLv47Ams7VklaD2c37oCqQytqNYSrfhE2e:V4sn2Nk2W+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f53d12f9fa40917d6ec69f4f242b70
Files
-
59f53d12f9fa40917d6ec69f4f242b70.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE