Behavioral task
behavioral1
Sample
16020f485dbce02150be3b31b44f03930353affd8bb5ebe8f651cc95c09dfad8.exe
Resource
win7-20231020-en
General
-
Target
16020f485dbce02150be3b31b44f03930353affd8bb5ebe8f651cc95c09dfad8
-
Size
1.1MB
-
MD5
027ba71e9af91d98fd9fbd1786322ad5
-
SHA1
801b242175a7e4bee4052ef51b4debee14f00336
-
SHA256
16020f485dbce02150be3b31b44f03930353affd8bb5ebe8f651cc95c09dfad8
-
SHA512
c97e2dbb6a0fbae7a146346e554bddce8e3fa3fd76aeb47967b35948eb5fbefc6005e15c8074154a44725707c0d640625e6e501d323d187f550b05611dd8498f
-
SSDEEP
12288:2PcrfR6ZnOkx2LIaHOuW5o/+RcMJ8VIC0PHK/eeYs8qZ:2Ur56ZnOkx2LFHjSo2RcnHeef
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 16020f485dbce02150be3b31b44f03930353affd8bb5ebe8f651cc95c09dfad8 unpack001/out.upx
Files
-
16020f485dbce02150be3b31b44f03930353affd8bb5ebe8f651cc95c09dfad8.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ