Behavioral task
behavioral1
Sample
85e455f4c6a0e5f10fc1d8974d5ec1bc33a7b04b64ce5eac754498bc8461bd6f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
85e455f4c6a0e5f10fc1d8974d5ec1bc33a7b04b64ce5eac754498bc8461bd6f.exe
Resource
win10v2004-20230703-en
General
-
Target
85e455f4c6a0e5f10fc1d8974d5ec1bc33a7b04b64ce5eac754498bc8461bd6f
-
Size
536KB
-
MD5
d9964ba9ef07cccc78a1c45727c2f154
-
SHA1
b92265d704968a92e0dd53b3ccfeb755ebf6281d
-
SHA256
85e455f4c6a0e5f10fc1d8974d5ec1bc33a7b04b64ce5eac754498bc8461bd6f
-
SHA512
a801c1db924ccec9da5d1967511e28f0d155d3e64a23d38747f62b4b837172e02dd66cea0a70f62961c75650cf004b38d783020fc61c3f4fa1bc38c75c9f2f42
-
SSDEEP
12288:aOreCbJ6z1GZnCbPLwY5ZhUXy4Okx2LIa:2CKTYrOkx2LF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 85e455f4c6a0e5f10fc1d8974d5ec1bc33a7b04b64ce5eac754498bc8461bd6f unpack001/out.upx
Files
-
85e455f4c6a0e5f10fc1d8974d5ec1bc33a7b04b64ce5eac754498bc8461bd6f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 402KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 482KB - Virtual size: 489KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ