Behavioral task
behavioral1
Sample
d327c70dec9141583d086a97b4e83af511f4dc26ac6f8c56c5112dc093d11308.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d327c70dec9141583d086a97b4e83af511f4dc26ac6f8c56c5112dc093d11308.exe
Resource
win10v2004-20230220-en
General
-
Target
d327c70dec9141583d086a97b4e83af511f4dc26ac6f8c56c5112dc093d11308
-
Size
3.7MB
-
MD5
efeceea802b91e865f1c39a8b457d0df
-
SHA1
5693bb86ab7b75895202168a113dcb12bbf2b8e9
-
SHA256
d327c70dec9141583d086a97b4e83af511f4dc26ac6f8c56c5112dc093d11308
-
SHA512
19a1b4ca831d5e7e9b18fce6af19bcc01be75619d45c6650a8d30587b19dcea65d5cf35cd68a313d354a7cd2afdc4ec37c164bad3720542cf4782cdad4679c9d
-
SSDEEP
49152:ZMU+90GitQ6VwXPNeyNKFGwokD1kGG9FQJ9+GfhTANeOeA2DB1eWbEqxjbPq+loE:91t3O/NcMokGGzu9fBANN52DBHzxvyQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d327c70dec9141583d086a97b4e83af511f4dc26ac6f8c56c5112dc093d11308 unpack001/out.upx
Files
-
d327c70dec9141583d086a97b4e83af511f4dc26ac6f8c56c5112dc093d11308.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ