General
-
Target
test.exe
-
Size
77.3MB
-
MD5
9d6f5eb4a4976ce17a16f77bde9a0d15
-
SHA1
2afedae57a5534a2ff0fef65091aa98a40a12be0
-
SHA256
34d3c8d71d01b1342aca419c0fe94f5904d72908c9526ddaf8274bdf04d4bc47
-
SHA512
f139f2d897391cce5e49f5889774fc5a0d8a2f8a82acb6b90b22b0f1fe3380dc36fc8dfb1657acf6b66048eaa6619cf89daed4b7de701838f80558265c79e7cc
-
SSDEEP
1572864:mzUPU1e4iamkhLDymfMd+lwqr3nb7tfHDl6avtgWcYZAhlW8HJqET:v4e4iadhLDyDduTnb75HDlFeWcyA/W8P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.exe
Files
-
test.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
main.pyc