Behavioral task
behavioral1
Sample
a2d1163e89fe752f8f1257602c8fec25936384b4f2b42cc886bd037c735910bf.exe
Resource
win7-20230712-en
General
-
Target
a2d1163e89fe752f8f1257602c8fec25936384b4f2b42cc886bd037c735910bf
-
Size
2.4MB
-
MD5
14cb48b07fadddb80c13c868f10dee51
-
SHA1
92036748ebaa70d07fa0721b3330bdc9033469df
-
SHA256
a2d1163e89fe752f8f1257602c8fec25936384b4f2b42cc886bd037c735910bf
-
SHA512
091248ca9267994f76e9e0113d1f7ef91fe5a2f7af108b868e2de03fe9c0ef22a5055abf2701ce7f833c4a443bc50b9e1d2b794cf4416afdf158a753b92fa6b6
-
SSDEEP
49152:5IZHQf/TEQx0YAaVo8oP3KpuZj3QcG2jGnYALUeep:eHW/TERz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a2d1163e89fe752f8f1257602c8fec25936384b4f2b42cc886bd037c735910bf unpack001/out.upx
Files
-
a2d1163e89fe752f8f1257602c8fec25936384b4f2b42cc886bd037c735910bf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ