Behavioral task
behavioral1
Sample
5f59f3ca3f7aec30d68287149f41416cc6c641b549217c3bd0ac1bf38ce0d24b.exe
Resource
win7-20240903-en
General
-
Target
5f59f3ca3f7aec30d68287149f41416cc6c641b549217c3bd0ac1bf38ce0d24b
-
Size
234KB
-
MD5
50e05b07ae81919be308f21cbd661b35
-
SHA1
5429c28eb1656ace9d963524c072ad52dd8ec71a
-
SHA256
5f59f3ca3f7aec30d68287149f41416cc6c641b549217c3bd0ac1bf38ce0d24b
-
SHA512
2447adcf88acc6c1c82e877cfefa9dd5f26ebd92dd308c412637e351331af337c868c7f238aa28fffb34c75b922c95f5b2c3f6298c5fe71d3ed9640309594d8f
-
SSDEEP
6144:6lez2ssftlVN+zBfGrSWm+omDAgQsSygGG2S1:H6silNoGSJ+omDAdsWGLS1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f59f3ca3f7aec30d68287149f41416cc6c641b549217c3bd0ac1bf38ce0d24b
Files
-
5f59f3ca3f7aec30d68287149f41416cc6c641b549217c3bd0ac1bf38ce0d24b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe2 Size: 29B - Virtual size: 29B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ