Behavioral task
behavioral1
Sample
dcbe8e4629e983521dd330ca591dc5029596a0af2f75110c09a1abef183fb156.exe
Resource
win7-20230712-en
General
-
Target
dcbe8e4629e983521dd330ca591dc5029596a0af2f75110c09a1abef183fb156
-
Size
4.9MB
-
MD5
6c3c0a1fa3fddf5a04c427b84b9b90ed
-
SHA1
cb4336ba916bfc25d8d560ee35ae41b7fbd698e9
-
SHA256
dcbe8e4629e983521dd330ca591dc5029596a0af2f75110c09a1abef183fb156
-
SHA512
53d020b7e4725979045b967fd405cc03e9eed814e118542d19140ccf87b4b89b7ef5ce7242eeb0f94f3e343c8ef708d1d9015be4145a613a5bf9cd099919403e
-
SSDEEP
98304:ZH8/TE9SM44VmmF6H9TD62Q3xTncswV9tup:OrQa4s3H5D6fVxS9Ep
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dcbe8e4629e983521dd330ca591dc5029596a0af2f75110c09a1abef183fb156 unpack001/out.upx
Files
-
dcbe8e4629e983521dd330ca591dc5029596a0af2f75110c09a1abef183fb156.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ