Behavioral task
behavioral1
Sample
97efafdb71f975b2e6328466697a2d68df89f4d511734a8334361db994f2dcc7.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
97efafdb71f975b2e6328466697a2d68df89f4d511734a8334361db994f2dcc7.exe
Resource
win10v2004-20231023-en
General
-
Target
97efafdb71f975b2e6328466697a2d68df89f4d511734a8334361db994f2dcc7
-
Size
8.4MB
-
MD5
94f6e9a059a7b18c410e4e277592d594
-
SHA1
b1cceb7655d5c4cc3210fea6d5b9cc28946317b6
-
SHA256
97efafdb71f975b2e6328466697a2d68df89f4d511734a8334361db994f2dcc7
-
SHA512
dc2360f649850841873e5370597106ff05a50bfc01024a49e0c9c0db3d97f669466c46c1ef85cc76c141660c1db94721e75856d49d477885e51cd81667f6db12
-
SSDEEP
196608:Cg6tupDqCQ42h3ebOjzWSB9lEtUnlWcEmY6:wupuA2huaHZnitGww
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 97efafdb71f975b2e6328466697a2d68df89f4d511734a8334361db994f2dcc7 unpack001/out.upx
Files
-
97efafdb71f975b2e6328466697a2d68df89f4d511734a8334361db994f2dcc7.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 21.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29.5MB - Virtual size: 29.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ