Behavioral task
behavioral1
Sample
d67c26bd8f2d45b777ab6294d9965f92baf0a4dea1843db7f4addac8390e60c2.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d67c26bd8f2d45b777ab6294d9965f92baf0a4dea1843db7f4addac8390e60c2.exe
Resource
win10v2004-20231020-en
General
-
Target
d67c26bd8f2d45b777ab6294d9965f92baf0a4dea1843db7f4addac8390e60c2
-
Size
5KB
-
MD5
5e051f21889ee68ba0befa9673b922db
-
SHA1
4a33ee5d82ef11a1cf0ec0deb55a9b3cc423cabe
-
SHA256
d67c26bd8f2d45b777ab6294d9965f92baf0a4dea1843db7f4addac8390e60c2
-
SHA512
1a299077f56f33bbc24960cdec8fe5c273010f6f887e0218180efeae70ed330a3ad69d43e98d4fb459eb9cb3e833829811892972c2c8d3ee0d76696de3cf1435
-
SSDEEP
96:tv110GxW2FjJYPmVI+V9IGjSJGs+K1C+Rv2aKb43dkUd:tv110GPdYPmVI+UGj8C+RPj3dkUd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d67c26bd8f2d45b777ab6294d9965f92baf0a4dea1843db7f4addac8390e60c2 unpack001/out.upx
Files
-
d67c26bd8f2d45b777ab6294d9965f92baf0a4dea1843db7f4addac8390e60c2.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE