Behavioral task
behavioral1
Sample
59ca7511206dd1b62e967c4a0220cfb2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
59ca7511206dd1b62e967c4a0220cfb2.exe
Resource
win10v2004-20240419-en
General
-
Target
59ca7511206dd1b62e967c4a0220cfb2.exe
-
Size
565KB
-
MD5
59ca7511206dd1b62e967c4a0220cfb2
-
SHA1
2bf9d9d0d51153f9b680cc52ac2e5be24bf7f40f
-
SHA256
7234f280bb7094131bebdac557f7e82f27481e1e22ea2d62ed171eac9d9114f9
-
SHA512
4faad2f67642f463a5cb69fbfd8568a89b75b186939767030e39eddd12db8a3829054ae04ed114641da3b95610c2bbfafd4ede976f04b4dbffe9194f67647541
-
SSDEEP
12288:VEQoSfq5yBuqQteMAwdUCFLWLPBGZ1D34xaEWTfHAyj3morjxJqhrq9:Vb/Q8MNviPBK1D01eAQ3mnpq9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59ca7511206dd1b62e967c4a0220cfb2.exe
Files
-
59ca7511206dd1b62e967c4a0220cfb2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE