Behavioral task
behavioral1
Sample
972a757ad945da089a431080cebe84d622e483f4a248f4993a660fe1a0e3f978.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
972a757ad945da089a431080cebe84d622e483f4a248f4993a660fe1a0e3f978.exe
Resource
win10v2004-20230703-en
General
-
Target
972a757ad945da089a431080cebe84d622e483f4a248f4993a660fe1a0e3f978
-
Size
889KB
-
MD5
ad6d1819f5a7bf06d1797c92360a225d
-
SHA1
faf256720fcb69cd04233e97c3fabcaf5a23fecc
-
SHA256
972a757ad945da089a431080cebe84d622e483f4a248f4993a660fe1a0e3f978
-
SHA512
9cd8ee2ac38cde35c6637cf46cae7714dbbbe97ebc5265158ea79afe1bd7cb5be435ba2a33a2f5c7dbd003f987bc6ec78addb4c6f6510eb952eac447bd1961ae
-
SSDEEP
6144:0J1etoAWIVpTiAKhft1JEqwLcEOkCybEaQRXr9HNdvOa7AXGSqLr4Eza:gAoo7i5FMqwTOkx2LIa0EC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 972a757ad945da089a431080cebe84d622e483f4a248f4993a660fe1a0e3f978 unpack001/out.upx
Files
-
972a757ad945da089a431080cebe84d622e483f4a248f4993a660fe1a0e3f978.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ