Behavioral task
behavioral1
Sample
de4062da136718598ba3a793aa44880b4a2066f44f4bf34871b1cbf70be9bfc8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
de4062da136718598ba3a793aa44880b4a2066f44f4bf34871b1cbf70be9bfc8.exe
Resource
win10v2004-20230220-en
General
-
Target
de4062da136718598ba3a793aa44880b4a2066f44f4bf34871b1cbf70be9bfc8
-
Size
273KB
-
MD5
587b04ec170c99bcf4a49c4d92f0dbd4
-
SHA1
dca1c81548fef25aeaab2b96fc532a55dfdb3a36
-
SHA256
de4062da136718598ba3a793aa44880b4a2066f44f4bf34871b1cbf70be9bfc8
-
SHA512
85a911eaa59412b9169d809143869fb2fc626e21c225294dbd9b5eb1caab1c26822eb6a760a724eaf319fd7094ef25b9246da44231a0581122fa3eee74941e31
-
SSDEEP
6144:UKfKhkBTMZE7tJPStBTwv/BnCt0YPbreDtgnps9LJpMXdJsRd9nn:UMM48TwvpCW1gL4dl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource de4062da136718598ba3a793aa44880b4a2066f44f4bf34871b1cbf70be9bfc8 unpack001/out.upx
Files
-
de4062da136718598ba3a793aa44880b4a2066f44f4bf34871b1cbf70be9bfc8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ