Behavioral task
behavioral1
Sample
GPU-Z-2.48.0-Chs.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
GPU-Z-2.48.0-Chs.exe
Resource
win10v2004-20230220-en
General
-
Target
GPU-Z-2.48.0-Chs.exe
-
Size
9.6MB
-
MD5
3d3fb0f794ace57af90a9922f038cee5
-
SHA1
b04f3ce94d2ad4e680ecd302cd9fbf9d30a8a8cf
-
SHA256
504e54eb7888687a604bedf0c039afcdef0e1836f6848c706f288f5b10284541
-
SHA512
e64b95cd3069556e401257a63a30944cd9825b569795a8c7dcdf422d99f79caabe32091c51e733e67b93414cafd804b283b2944b388ccc886c6f7da5e5ccfb74
-
SSDEEP
196608:MXnw3bMht2VqjeDUuaxC8uTDW+kAdfweEHbf80kM5wA613:MXwYhFeDKDuvW+l4nbf8VMyA613
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource GPU-Z-2.48.0-Chs.exe unpack001/out.upx
Files
-
GPU-Z-2.48.0-Chs.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 18.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22.9MB - Virtual size: 22.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ