Behavioral task
behavioral1
Sample
5053e4339b911826cbf997c9a357271aa14aebe42b10896b3277263eb29a57a7.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5053e4339b911826cbf997c9a357271aa14aebe42b10896b3277263eb29a57a7.exe
Resource
win10v2004-20231025-en
General
-
Target
5053e4339b911826cbf997c9a357271aa14aebe42b10896b3277263eb29a57a7
-
Size
34KB
-
MD5
1a80202a52fc45b480e07883a87701f0
-
SHA1
24a33aac6cc4d6dc5dec0b571261bfc95bfa952e
-
SHA256
5053e4339b911826cbf997c9a357271aa14aebe42b10896b3277263eb29a57a7
-
SHA512
ae7b4027fe42cf146f0a62809c5f9c171b2948b265f18c1f573537e3d4fd9aa2c4949952e5f0a0d05fcb9c1947dbec3b2b3b295ae341efa568c6e6a3dab11fd6
-
SSDEEP
768:+739mXOfBHwXigL37XRF3L0IfPhEaxLULA/vw:e9mXOfBuVF3LrXh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5053e4339b911826cbf997c9a357271aa14aebe42b10896b3277263eb29a57a7 unpack001/out.upx
Files
-
5053e4339b911826cbf997c9a357271aa14aebe42b10896b3277263eb29a57a7.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ