Behavioral task
behavioral1
Sample
eb02e3b6578d0ee2ae98de843890eeea1a29cc679c635bf5c860d2cdefe9598f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
eb02e3b6578d0ee2ae98de843890eeea1a29cc679c635bf5c860d2cdefe9598f.exe
Resource
win10v2004-20230915-en
General
-
Target
eb02e3b6578d0ee2ae98de843890eeea1a29cc679c635bf5c860d2cdefe9598f
-
Size
1.8MB
-
MD5
f28d3456bf1400d4703b3710d7981809
-
SHA1
802dce33ff1da0516643e94838cfb6b4aa1ded6a
-
SHA256
eb02e3b6578d0ee2ae98de843890eeea1a29cc679c635bf5c860d2cdefe9598f
-
SHA512
20dd94bb21e0d5464c6daf575798f2005691dc7d0cb4c03196047fb2ded19023485b7a71b53ac0564dc6ad7bf9374d41defd95e349ab69e453ed548e48758b2a
-
SSDEEP
49152:b+RKVOZJrkS4AFOXCKHv+XlKfVYKeKuZuqE41l2PiZVLOu:yRGQAUOyKG1KNYKeKyup432PiZVf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource eb02e3b6578d0ee2ae98de843890eeea1a29cc679c635bf5c860d2cdefe9598f unpack001/out.upx
Files
-
eb02e3b6578d0ee2ae98de843890eeea1a29cc679c635bf5c860d2cdefe9598f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 880KB - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 876KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 768KB - Virtual size: 981KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ