Behavioral task
behavioral1
Sample
e52d26d9d8ba906d177e386fd1da032548c160902498e033c957ed143acac96d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e52d26d9d8ba906d177e386fd1da032548c160902498e033c957ed143acac96d.exe
Resource
win10v2004-20230703-en
General
-
Target
e52d26d9d8ba906d177e386fd1da032548c160902498e033c957ed143acac96d
-
Size
590KB
-
MD5
65068faac550d0223bde022df938056d
-
SHA1
a3d4b17503fbeac76886ce468ab8615db654f401
-
SHA256
e52d26d9d8ba906d177e386fd1da032548c160902498e033c957ed143acac96d
-
SHA512
5078735bf6b0a0b0be3c2d8df9be69d47e50a63315ad7366ef15f9584f499437b7ad7fb151457f0f59ba75d3ec4f6766e9155d8ff65a8eafa929eaa2156e2bf8
-
SSDEEP
12288:uKayVkSXv0Oo4Z5ah5tc3sO7ey92v5e2JA09:uTqkS/0E45t6swkyk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e52d26d9d8ba906d177e386fd1da032548c160902498e033c957ed143acac96d unpack001/out.upx
Files
-
e52d26d9d8ba906d177e386fd1da032548c160902498e033c957ed143acac96d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 492KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 820KB - Virtual size: 817KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ