Behavioral task
behavioral1
Sample
50a6f40a167bd650503082496a48759d4729a850e6dac26d1301660a3e4debd0.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
50a6f40a167bd650503082496a48759d4729a850e6dac26d1301660a3e4debd0.exe
Resource
win10v2004-20230703-en
General
-
Target
50a6f40a167bd650503082496a48759d4729a850e6dac26d1301660a3e4debd0
-
Size
3.9MB
-
MD5
5ed3c25ff85407a506923e2f2f2f9b1e
-
SHA1
c822c4be425a1156e6bc6c38d5a039e5b45e81e7
-
SHA256
50a6f40a167bd650503082496a48759d4729a850e6dac26d1301660a3e4debd0
-
SHA512
ff826093fcefdcd0d3e7914b8753cbf7783580c99a1055c2d5bbb669cc97b121f9531e959cf96d4aec4ec684f212743b55f79ac63f88f29616778f22c77b1d67
-
SSDEEP
98304:Bhe7f+4+Gucu7Rdlc7GQHsjOni7PMZZ1ax:ve7ft+GhAg6Jyni70Fax
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 50a6f40a167bd650503082496a48759d4729a850e6dac26d1301660a3e4debd0 unpack001/out.upx
Files
-
50a6f40a167bd650503082496a48759d4729a850e6dac26d1301660a3e4debd0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 648KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ