General
-
Target
0810rtnocr_2023-08-10_08-42-34.exe
-
Size
3.0MB
-
MD5
db4e7c3a3553dd0355c43162b490142a
-
SHA1
a909ff86ec019a247908fc623f723e2855715245
-
SHA256
aef80451792e9ac3dea38a82f6dafaf5b7c8b6171c4848e02716c7fe1238423d
-
SHA512
a7481bbff82d793a7e0d5fedebea12e60d9e6b6302486e4b334b861a541faf2937c53ffedfdf870e3a419dadb9ff9a0c4e8e5119f0d0e2616de2434cf4d0b15b
-
SSDEEP
49152:BBzR+1Qs4mqR/hpVQ9uzn+BLNEdrRSbr7/2kHWlJLXQ4Yu+y9cOXdt+RNev88ZM:7zR+1R4LJXu9uzn+kdoj26YLXQ4HFdtS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0810rtnocr_2023-08-10_08-42-34.exe unpack001/out.upx
Files
-
0810rtnocr_2023-08-10_08-42-34.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ