Behavioral task
behavioral1
Sample
6de8ec2b96c74363f8d372db4cc6189059bd83c15b9db19b0291ba1717a313df.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6de8ec2b96c74363f8d372db4cc6189059bd83c15b9db19b0291ba1717a313df.exe
Resource
win10v2004-20230831-en
General
-
Target
6de8ec2b96c74363f8d372db4cc6189059bd83c15b9db19b0291ba1717a313df
-
Size
4.9MB
-
MD5
f410f7e13cc59069268f98052f97868f
-
SHA1
8fe9bbe010c3062032d43d61556bd55be0bf2c81
-
SHA256
6de8ec2b96c74363f8d372db4cc6189059bd83c15b9db19b0291ba1717a313df
-
SHA512
d5b7fceb54f6d0d03baabe8f79838431e44e07b2c616d32bd8d7916bb45af6b3f971c9a4a569cd6a4bf7fd51cd26fed7d352d1e6cd10d0eb6e809507c904a6da
-
SSDEEP
98304:LFImr9HIP8VZ472+gdQiK39x+u3eFrdc5lpQoWevC8pjTTJsz1RxvUYBEj8c:LvCUVCC+1seXptrljsr48c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6de8ec2b96c74363f8d372db4cc6189059bd83c15b9db19b0291ba1717a313df unpack001/out.upx
Files
-
6de8ec2b96c74363f8d372db4cc6189059bd83c15b9db19b0291ba1717a313df.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 844KB - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ