Behavioral task
behavioral1
Sample
84cc5a6053524186c8f00193b8d8fa3c7cd90a1c53b2f4478a3bee0087880ddf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
84cc5a6053524186c8f00193b8d8fa3c7cd90a1c53b2f4478a3bee0087880ddf.exe
Resource
win10v2004-20230915-en
General
-
Target
84cc5a6053524186c8f00193b8d8fa3c7cd90a1c53b2f4478a3bee0087880ddf
-
Size
266KB
-
MD5
7bfb6089383b236b56816e1b45bdd2a3
-
SHA1
c26c77a1e33dcc02ff0a324bbb03462f36a8fefb
-
SHA256
84cc5a6053524186c8f00193b8d8fa3c7cd90a1c53b2f4478a3bee0087880ddf
-
SHA512
5018ef1321905c7a019b10f7ccd5bba30721aa0f926a31f100af4cf616368a0d7f9b45d7e4b247553a53f44b32f36ca0dff32cc20a3f01adfc587a761b735db2
-
SSDEEP
6144:mXzKdNY49u8rV9Rp4cj3VUKIpBdSz01net:9a4Acj4cxfIoz01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 84cc5a6053524186c8f00193b8d8fa3c7cd90a1c53b2f4478a3bee0087880ddf unpack001/out.upx
Files
-
84cc5a6053524186c8f00193b8d8fa3c7cd90a1c53b2f4478a3bee0087880ddf.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ