Behavioral task
behavioral1
Sample
190ced6dfada8283af6e052b0bbd0b8988996ba59646ac5c1b5f7003fa174ef2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
190ced6dfada8283af6e052b0bbd0b8988996ba59646ac5c1b5f7003fa174ef2.exe
Resource
win10v2004-20230915-en
General
-
Target
190ced6dfada8283af6e052b0bbd0b8988996ba59646ac5c1b5f7003fa174ef2
-
Size
558KB
-
MD5
5ab975bb71e48bcf3c73424167adf3fb
-
SHA1
99e4d9d7fac285a225b772b57c2b5b4f91edbea3
-
SHA256
190ced6dfada8283af6e052b0bbd0b8988996ba59646ac5c1b5f7003fa174ef2
-
SHA512
592f339834b4dd4f0c38af5603e2dbafcf93e0ddd244e58a9c9d60d59a02cbafab16c751eb65e1466136791f48cd7ff99723495f7f69f1f5fad95dd759ef219c
-
SSDEEP
12288:GcQbx3pBocfwL8TpEbezdll5+k9EnChg+fmP13JjUWw0PfGBkR:Gnb1ocfRBz/TRW+63w0XJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 190ced6dfada8283af6e052b0bbd0b8988996ba59646ac5c1b5f7003fa174ef2 unpack001/out.upx
Files
-
190ced6dfada8283af6e052b0bbd0b8988996ba59646ac5c1b5f7003fa174ef2.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 533KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 856KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ