Behavioral task
behavioral1
Sample
b187cf943809476ed95245f6221cd13a0dd88ec18c05c6b8832bbbd44c44fa05.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b187cf943809476ed95245f6221cd13a0dd88ec18c05c6b8832bbbd44c44fa05.exe
Resource
win10v2004-20230220-en
General
-
Target
b187cf943809476ed95245f6221cd13a0dd88ec18c05c6b8832bbbd44c44fa05
-
Size
12.0MB
-
MD5
3b15f912486e03530db3967113ca8be1
-
SHA1
fe6d2317fbaff473b283fd3cd545a119708814d2
-
SHA256
b187cf943809476ed95245f6221cd13a0dd88ec18c05c6b8832bbbd44c44fa05
-
SHA512
ca195304d2974024a70920fe836baf414c4cbfd4f51e84ac5b9059bff7764cee2b7764d3fbb0705e14b870408ff5a709ddd55e4f2d7f1d5671c8426a23c5f7db
-
SSDEEP
196608:7XCHzMXjFjNxgzigjk+KXcP81CD07eIw+WYA1PyfsqFZzhbjwWozMsOIMIaOEJoN:3FYWgcL17qIwEA1usqFZzhbcWozdL9E2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b187cf943809476ed95245f6221cd13a0dd88ec18c05c6b8832bbbd44c44fa05 unpack001/out.upx
Files
-
b187cf943809476ed95245f6221cd13a0dd88ec18c05c6b8832bbbd44c44fa05.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ