Behavioral task
behavioral1
Sample
50c8a7d1cc7b7ee40b8e75c5281317d6.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
50c8a7d1cc7b7ee40b8e75c5281317d6.exe
Resource
win10v2004-20230621-en
General
-
Target
50c8a7d1cc7b7ee40b8e75c5281317d6.bin
-
Size
242KB
-
MD5
50c8a7d1cc7b7ee40b8e75c5281317d6
-
SHA1
bb5a8ab40d75d53d674272c2fbdd693c7f8cc298
-
SHA256
0d39ec17790df0aa810eff9d7af603f73b6ca0bace0e7bce123f4ec01f0a9681
-
SHA512
962a8a92732c6796e3f02a5319fcf5a431832945c9c504c0a989e3781cb1a7baa3e8757783a3a6ec1b3801e0a7fc4face6c96ea3f8f2cf8e66eac35167892999
-
SSDEEP
6144:XYBZkUz5ZeYMANSw7bTcyiYaYWWQvOOcdQDJ:ogcblMTwQ/MAGCJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 50c8a7d1cc7b7ee40b8e75c5281317d6.bin unpack001/out.upx
Files
-
50c8a7d1cc7b7ee40b8e75c5281317d6.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 716KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 705KB - Virtual size: 705KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ