Behavioral task
behavioral1
Sample
88198c8317b3bbdf5f42c9ddd6abf27b65dc27cbfa23e95871d47d0b70893cea.exe
Resource
win10-20231023-en
General
-
Target
88198c8317b3bbdf5f42c9ddd6abf27b65dc27cbfa23e95871d47d0b70893cea
-
Size
266KB
-
MD5
abd5786adb95e94d37b6be1c58211c2c
-
SHA1
080dcca07d93133e6c3765edaba21eb89d28339f
-
SHA256
88198c8317b3bbdf5f42c9ddd6abf27b65dc27cbfa23e95871d47d0b70893cea
-
SHA512
d149e3e201823e6ce9286aed84af237270a97c7d692b1bffd02c697e4d37b06e753f9706cdd88f3776df8f4b1eb304c3229e6b6308df3d28f2508e63159a9717
-
SSDEEP
6144:7XzKdNY49u8rVe6btCN2ypDIAygDr01net:Ea4Af6bsN1MA01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 88198c8317b3bbdf5f42c9ddd6abf27b65dc27cbfa23e95871d47d0b70893cea unpack001/out.upx
Files
-
88198c8317b3bbdf5f42c9ddd6abf27b65dc27cbfa23e95871d47d0b70893cea.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ