Behavioral task
behavioral1
Sample
2f5851fe63df00ae8d7d4ed9fdfc09a5a30e9854cfe8f30c4d2931f4cf983558.exe
Resource
win7-20230831-en
General
-
Target
2f5851fe63df00ae8d7d4ed9fdfc09a5a30e9854cfe8f30c4d2931f4cf983558
-
Size
4.9MB
-
MD5
ca42923db507cd1ddc781561e6009cfc
-
SHA1
05619295033c8df5f24e71a2924e6d5a60a3fbf4
-
SHA256
2f5851fe63df00ae8d7d4ed9fdfc09a5a30e9854cfe8f30c4d2931f4cf983558
-
SHA512
83b93eedefc7b980a025f73050398e01ce116f84a020469d5e9c791d913a4db973d67498fdf2ea01242c66a1ad810b0bf25854f8178e61ab80dbbcedab40e4a2
-
SSDEEP
98304:X2ONi+29K/WE9PhBGjohAInvqIKofZP5UyeAQQm4OTb12pcFS+fRXN/f0ykSJf+h:X4+SK9hh4M5v9fZP5UNDcOnMp0xN/8dJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2f5851fe63df00ae8d7d4ed9fdfc09a5a30e9854cfe8f30c4d2931f4cf983558 unpack001/out.upx
Files
-
2f5851fe63df00ae8d7d4ed9fdfc09a5a30e9854cfe8f30c4d2931f4cf983558.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 416KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ