Behavioral task
behavioral1
Sample
59795c0a11d7732bb1ba9233662a6d74.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59795c0a11d7732bb1ba9233662a6d74.exe
Resource
win10v2004-20231222-en
General
-
Target
59795c0a11d7732bb1ba9233662a6d74.bin
-
Size
265KB
-
MD5
59795c0a11d7732bb1ba9233662a6d74
-
SHA1
cef8676847c3a2ac9a3848e7859f72a2b2c30c68
-
SHA256
8f17c46dd82b7e3c78affab6a48868c650053aae63551750d62a07c1c10df894
-
SHA512
5b5954dead70e2c36a56375473e5100ef966d4b370e939a7e7dcd2c832b56c8ebcd89325bba3de0f64b6a1451f400a6bbf31a75afb8a5218eca845ad70c5a89d
-
SSDEEP
6144:VAuPfKPGrVHs5Hq3ePGQj1C2wp1/2Bv3dFqOsg9KxgGq1G0StLzoS:VDSPGrds5Hq34zcmtyg2vq1G0gLzoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59795c0a11d7732bb1ba9233662a6d74.bin
Files
-
59795c0a11d7732bb1ba9233662a6d74.bin.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE