Behavioral task
behavioral1
Sample
61551c042311e8f918545f1f89584b7e0c5f885f14880d300c0467982108b843.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
61551c042311e8f918545f1f89584b7e0c5f885f14880d300c0467982108b843.exe
Resource
win10v2004-20230703-en
General
-
Target
61551c042311e8f918545f1f89584b7e0c5f885f14880d300c0467982108b843
-
Size
33KB
-
MD5
dda9b0173cf10a1b963a656d460580fc
-
SHA1
8041f593f6b9d2073e6d6c6fbb3db0fc1d97b40c
-
SHA256
61551c042311e8f918545f1f89584b7e0c5f885f14880d300c0467982108b843
-
SHA512
6916a43872d404f1e9a5b3c4129423e52e18470de132e1d68981b3edba7bd19ad4dc7c1a42d5fbe84a496c4fea032400a5c8575beb202eedb437e9d85159b699
-
SSDEEP
768:q0+ZDstzPXr3bGUytLc3RX1bKB2Ct2Uw9EwNts1:q0+ZAtzr34tL+RZKLkUw9Hq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 61551c042311e8f918545f1f89584b7e0c5f885f14880d300c0467982108b843 unpack001/out.upx
Files
-
61551c042311e8f918545f1f89584b7e0c5f885f14880d300c0467982108b843.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ