Behavioral task
behavioral1
Sample
2665cd4d72d449a8de71fa990ebbb7cd6738d7fa54809cf5c5a4f09a2d0619a3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2665cd4d72d449a8de71fa990ebbb7cd6738d7fa54809cf5c5a4f09a2d0619a3.exe
Resource
win10v2004-20230915-en
General
-
Target
2665cd4d72d449a8de71fa990ebbb7cd6738d7fa54809cf5c5a4f09a2d0619a3
-
Size
266KB
-
MD5
82a1f89cd71fc7aaa3ef32e6bae25fac
-
SHA1
4628e2d33cdac54ae9b316a26d7ef8ad24e664d8
-
SHA256
2665cd4d72d449a8de71fa990ebbb7cd6738d7fa54809cf5c5a4f09a2d0619a3
-
SHA512
a4b02f11c7c1cd11d0bff9b785c091d20636a73ce927ee9d5ba41dc82eb314d6ede8454f8f393977ad701ef4bc393b0fbc4c27b8dab484d0ab9a6bd03522bf4a
-
SSDEEP
3072:jNXEGZJWhfNFC4S60+XoLczrVmXt1OGcWKK8/3UuwiDIAkJhgDdR7H01ne4PK:JXzKdNY49u8rVKThypDIAygD/01net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2665cd4d72d449a8de71fa990ebbb7cd6738d7fa54809cf5c5a4f09a2d0619a3 unpack001/out.upx
Files
-
2665cd4d72d449a8de71fa990ebbb7cd6738d7fa54809cf5c5a4f09a2d0619a3.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ