Behavioral task
behavioral1
Sample
684a3819d5f05d25a1bbaa2b1b911e6ea9fd981555e520f2dada508ffe182831.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
684a3819d5f05d25a1bbaa2b1b911e6ea9fd981555e520f2dada508ffe182831.exe
Resource
win10v2004-20230824-en
General
-
Target
684a3819d5f05d25a1bbaa2b1b911e6ea9fd981555e520f2dada508ffe182831
-
Size
15.6MB
-
MD5
c153c5cecc4c3adf5a1a08e7b0493c83
-
SHA1
e9106abab77777e6b12631700557cbe447f453ca
-
SHA256
684a3819d5f05d25a1bbaa2b1b911e6ea9fd981555e520f2dada508ffe182831
-
SHA512
ec85369218090ab0c2e119a0f135ae1e7af6aa3b8fb17a367db14573311379cec2544aeabca9f9a7884f8f2c433160a48b5dba11cff33355a582e80fd366b279
-
SSDEEP
393216:ds69SimL51EMpGNv39iX+TLXg6jlHkiHLSA3FWYP/nERO3C:y6969qMpGd9iwL/j+Yu0MRO3C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 684a3819d5f05d25a1bbaa2b1b911e6ea9fd981555e520f2dada508ffe182831 unpack001/out.upx
Files
-
684a3819d5f05d25a1bbaa2b1b911e6ea9fd981555e520f2dada508ffe182831.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.0MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ