Behavioral task
behavioral1
Sample
d1c1eff937e9f1b0c7a0a1727b4d24a4dfb3cf976bee390cb8d914f3673c8161.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d1c1eff937e9f1b0c7a0a1727b4d24a4dfb3cf976bee390cb8d914f3673c8161.exe
Resource
win10v2004-20230703-en
General
-
Target
d1c1eff937e9f1b0c7a0a1727b4d24a4dfb3cf976bee390cb8d914f3673c8161
-
Size
1.5MB
-
MD5
35db74107337c6262ef6c0d9d7dec0e5
-
SHA1
a527bd2d195dd36af6cd4fa71386a91059c96d73
-
SHA256
d1c1eff937e9f1b0c7a0a1727b4d24a4dfb3cf976bee390cb8d914f3673c8161
-
SHA512
3c9d1317bb57f363d75762060c67a99f7f102067c164c81a896df442c6557fa632349334aef7b6e1d444f1d6455cb51487b1bac7158e28c964d596fe892aeb09
-
SSDEEP
24576:FejcJDKshV3jnFcovnIMiDYl3uJumD4phdigucMhF8jcrz39CFBOuSaT2SOtX8L9:ikKshp2OYDs7s4TdigfAAE1uxOX85
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d1c1eff937e9f1b0c7a0a1727b4d24a4dfb3cf976bee390cb8d914f3673c8161 unpack001/out.upx
Files
-
d1c1eff937e9f1b0c7a0a1727b4d24a4dfb3cf976bee390cb8d914f3673c8161.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ