Behavioral task
behavioral1
Sample
32c05bfbb3e343dfce40a255313ebfdb2e975d9fd5a23384c83aac0176838b05.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
32c05bfbb3e343dfce40a255313ebfdb2e975d9fd5a23384c83aac0176838b05.exe
Resource
win10v2004-20230703-en
General
-
Target
32c05bfbb3e343dfce40a255313ebfdb2e975d9fd5a23384c83aac0176838b05
-
Size
1.6MB
-
MD5
829a955aa11c270307d5df8599de44e5
-
SHA1
dfd1ef2b39b88c251c4a16587277cef48edd920c
-
SHA256
32c05bfbb3e343dfce40a255313ebfdb2e975d9fd5a23384c83aac0176838b05
-
SHA512
c52e9fac315af2ba9c52c5afde6376ad05c09bea3c4af83a2880b628387bd21eaec794f83fba79044d050d31649c3d4e02bbeb5975e79d031bd79c8793993cb9
-
SSDEEP
49152:TXtkcREr2xhLgENnt0lGVzx5jQJe8G17/1konp32phCYM/PfMZVm:7tSr2xhLpttVV5ue8GhqEp32pYt+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 32c05bfbb3e343dfce40a255313ebfdb2e975d9fd5a23384c83aac0176838b05 unpack001/out.upx
Files
-
32c05bfbb3e343dfce40a255313ebfdb2e975d9fd5a23384c83aac0176838b05.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ