Behavioral task
behavioral1
Sample
063615257ba05eeedf426948607b837efeb6e517bb0e175e6fc095d34eef38a1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
063615257ba05eeedf426948607b837efeb6e517bb0e175e6fc095d34eef38a1.exe
Resource
win10v2004-20230915-en
General
-
Target
063615257ba05eeedf426948607b837efeb6e517bb0e175e6fc095d34eef38a1
-
Size
1.8MB
-
MD5
a3cac31e20daf5e3b733c341170d1dbe
-
SHA1
179050e0d963f26106a2f73733a48c5e59494734
-
SHA256
063615257ba05eeedf426948607b837efeb6e517bb0e175e6fc095d34eef38a1
-
SHA512
649b9e5057a0532935ed7c2754c837fb0994b2d062592f4e10b3ac0a7dd266b5922c3ae512404a391d2f36347f216b18e1437bf5b29767052572348cf6b3c25a
-
SSDEEP
49152:X+RKVOZJrkS4AFOXCKHv+XlKfVYKeKuZuqE41l2PiZVLOu:ORGQAUOyKG1KNYKeKyup432PiZVf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 063615257ba05eeedf426948607b837efeb6e517bb0e175e6fc095d34eef38a1 unpack001/out.upx
Files
-
063615257ba05eeedf426948607b837efeb6e517bb0e175e6fc095d34eef38a1.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 880KB - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 876KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 768KB - Virtual size: 981KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ