Behavioral task
behavioral1
Sample
b58f3b3ee623fe936017563bfb309a43e0ad1f41b5f272e3a1da14b4c4193ecc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b58f3b3ee623fe936017563bfb309a43e0ad1f41b5f272e3a1da14b4c4193ecc.exe
Resource
win10v2004-20240426-en
General
-
Target
b58f3b3ee623fe936017563bfb309a43e0ad1f41b5f272e3a1da14b4c4193ecc
-
Size
59KB
-
MD5
f48e8576f8d7079954a4fde26dc88515
-
SHA1
ad9f87aa77749bd9f3dc2e791c50224322440d60
-
SHA256
b58f3b3ee623fe936017563bfb309a43e0ad1f41b5f272e3a1da14b4c4193ecc
-
SHA512
58890476ae4e0d7888004c5a5324acbc51d0a893244bb26a60408fdf179895bcd274ff8649b4ede61ae513f309386bd1ce7699e534f8f9202e204c556d5b34b7
-
SSDEEP
1536:p8AeOFKJmAO9fe6v6M/Tb3oEOZAIz9ZTBd0X:p8AeSlH/Tb7OZAIB1IX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b58f3b3ee623fe936017563bfb309a43e0ad1f41b5f272e3a1da14b4c4193ecc
Files
-
b58f3b3ee623fe936017563bfb309a43e0ad1f41b5f272e3a1da14b4c4193ecc.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE