Behavioral task
behavioral1
Sample
fc2a39a5745953cda6e156099d7a9d52ab0d252e8728bd29a335aed87b1d2148.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fc2a39a5745953cda6e156099d7a9d52ab0d252e8728bd29a335aed87b1d2148.exe
Resource
win10v2004-20230831-en
General
-
Target
fc2a39a5745953cda6e156099d7a9d52ab0d252e8728bd29a335aed87b1d2148
-
Size
2.6MB
-
MD5
126f642184d1a861c79558b19a585b17
-
SHA1
b675fb51f874218d294bd9c43e13d4840fd48041
-
SHA256
fc2a39a5745953cda6e156099d7a9d52ab0d252e8728bd29a335aed87b1d2148
-
SHA512
6f98e4908e90711f3f2971754a48d273eab8712868f105e158368f7ae5481fcf163206cd3bf9bc321356345f67e6502cf1a251d58b47294fa5886fb174e3cf84
-
SSDEEP
49152:pHsjzSa8AeDYHqugOryOfqog7XxBUh3iBl5zS1c9nxvSLPQAVcyvWRVObWq0mnem:OjzYNmHFryOfq3zUh3iBhxvmPQAVcye0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fc2a39a5745953cda6e156099d7a9d52ab0d252e8728bd29a335aed87b1d2148 unpack001/out.upx
Files
-
fc2a39a5745953cda6e156099d7a9d52ab0d252e8728bd29a335aed87b1d2148.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ