Behavioral task
behavioral1
Sample
59e7cae9a1b6c4cb1382dd9bcc11db73776eb5cf71b0353645eeab2cc99f5548.exe
Resource
win7-20240903-en
General
-
Target
59e7cae9a1b6c4cb1382dd9bcc11db73776eb5cf71b0353645eeab2cc99f5548
-
Size
12.3MB
-
MD5
fa3e3c680d5f231ffa474aae06e1235f
-
SHA1
538e651e86be5cd32e68bdfb01edf8720a2a5ec5
-
SHA256
59e7cae9a1b6c4cb1382dd9bcc11db73776eb5cf71b0353645eeab2cc99f5548
-
SHA512
834066b17ca51d8aeef6f4c6c4b58f6335ec093a58d93c04b7e40ef14f93888de5e21435d506243741eab46fbd3639528fa21ac6cfe70c78fe937e5c0955e7fe
-
SSDEEP
196608:2+9lOudfuM5qYI2gUTaTVhPrOsgrWAnznhtKX5sByUm8yQxD1WOI:b9lHf758rTVxjgC27qX0mGxD1nI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59e7cae9a1b6c4cb1382dd9bcc11db73776eb5cf71b0353645eeab2cc99f5548
Files
-
59e7cae9a1b6c4cb1382dd9bcc11db73776eb5cf71b0353645eeab2cc99f5548.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 15.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9.8MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE