Behavioral task
behavioral1
Sample
60ac0e9af27e9f251d1a42f22de0bc160b102824eddf0a005866a5a39907918c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
60ac0e9af27e9f251d1a42f22de0bc160b102824eddf0a005866a5a39907918c.exe
Resource
win10v2004-20230915-en
General
-
Target
60ac0e9af27e9f251d1a42f22de0bc160b102824eddf0a005866a5a39907918c
-
Size
1.9MB
-
MD5
7882f3f9d023684be54bcf4499d83b8a
-
SHA1
479f3e74a98dca893984c7a36666da5ed7d6ec12
-
SHA256
60ac0e9af27e9f251d1a42f22de0bc160b102824eddf0a005866a5a39907918c
-
SHA512
7ec51cf7f1838356f6dd662b91c20c06d421b66e4130febdb8abc46a0023f4d75e0337d33ce0fc86bf9ee704adac7f5e19666d3cea63a581afac2b6970d29fb5
-
SSDEEP
49152:HWwN10s6TNdrcpHUFtxENg8P64CXK4S5jKhmnnDeR/H4cN8Ro/Mu1XHB:HWwN10s6JZlag94Z4S5GhmnaR/H4cNfp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 60ac0e9af27e9f251d1a42f22de0bc160b102824eddf0a005866a5a39907918c unpack001/out.upx
Files
-
60ac0e9af27e9f251d1a42f22de0bc160b102824eddf0a005866a5a39907918c.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 188KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ