Behavioral task
behavioral1
Sample
059e96c685610dc6dd315cbdfb8d67f5f08c9683657daeb7373fa71536a2f3deN.exe
Resource
win7-20240708-en
General
-
Target
059e96c685610dc6dd315cbdfb8d67f5f08c9683657daeb7373fa71536a2f3deN
-
Size
360KB
-
MD5
0cd8a27088b331c8d1d58d6d1db63da0
-
SHA1
18dedb14845e1a33c024117865fdcffc80d8abdf
-
SHA256
059e96c685610dc6dd315cbdfb8d67f5f08c9683657daeb7373fa71536a2f3de
-
SHA512
7e14758b360bb3b652b8731384598e40a35a54ec56a68922d1415028805e5dc978d521b13f01204ff5b2de6725f7e247a772ed49987e586cf5351853963527ad
-
SSDEEP
6144:Diu0srKxP6nVMg1FENy/V/5c6thb+lazG8:D50srcyLjN/5c6thb+lazG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059e96c685610dc6dd315cbdfb8d67f5f08c9683657daeb7373fa71536a2f3deN
Files
-
059e96c685610dc6dd315cbdfb8d67f5f08c9683657daeb7373fa71536a2f3deN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE