Behavioral task
behavioral1
Sample
ip patch_MGL.rar
Resource
win10v2004-20230915-es
Behavioral task
behavioral2
Sample
ip patch_MGL/ip-patch.exe
Resource
win10v2004-20230915-es
Behavioral task
behavioral3
Sample
out.exe
Resource
win10v2004-20230915-es
General
-
Target
ip patch_MGL.rar
-
Size
9KB
-
MD5
0b6c53e910fb7e20aa2c99cd3f6c0f61
-
SHA1
1e042c50f428f290bc2d65d38f9f2ac1053fbc58
-
SHA256
d4e713e50c893b2d7a2527bff66f9fe761e5d941758a265ff09077d85c22a438
-
SHA512
60b3f464eb4269b0d76ad76b0ed2137b5e7422869bb0af190e034d5b6ed93f7191fffb06f829249d2c02457b1f01ae71b13e08b130d0ca6d22807d43bb2468d7
-
SSDEEP
192:ztHNGcm3F1jxURZ/7B3rCw7DOGWLcTSztiPgK0fiFMxfIXA7FAm:dAcWF1jiT/7n7DO2+tiiQX+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ip patch_MGL/ip-patch.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/ip patch_MGL/ip-patch.exe unpack002/out.upx
Files
-
ip patch_MGL.rar.rar
-
ip patch_MGL/ip-patch.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ