Behavioral task
behavioral1
Sample
5c98e2789cbdf745862142d5b98c56f650b5a02a21099368498d11a0a7cd1bf1.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
5c98e2789cbdf745862142d5b98c56f650b5a02a21099368498d11a0a7cd1bf1.exe
Resource
win10v2004-20230703-en
General
-
Target
5c98e2789cbdf745862142d5b98c56f650b5a02a21099368498d11a0a7cd1bf1
-
Size
508KB
-
MD5
4a973fe0b33cfb8f5a998cedfecb280d
-
SHA1
dd5dd02772ae258a4675513c0a20f8bfa18be47e
-
SHA256
5c98e2789cbdf745862142d5b98c56f650b5a02a21099368498d11a0a7cd1bf1
-
SHA512
8f6e6c2ee3ed2223f67b1209bb4a20eb9a9fc98244ab98c958d25cfde3639f5526695532077e620dfca72595a1db93d8bc88f39494b76a07c9eaa103016eefd5
-
SSDEEP
6144:QONJKP+K+oeCutyNApsjZNHgLB8aBm9gGMKP1HOi4SZslHbQH:LYmMrZNA6CGMdfS+lHb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5c98e2789cbdf745862142d5b98c56f650b5a02a21099368498d11a0a7cd1bf1 unpack001/out.upx
Files
-
5c98e2789cbdf745862142d5b98c56f650b5a02a21099368498d11a0a7cd1bf1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ