Behavioral task
behavioral1
Sample
2118fc073dafd7cf7cf297e7123a568cf50a82d33b282b99adfa81ec9f826d85.exe
Resource
win7-20231023-en
General
-
Target
2118fc073dafd7cf7cf297e7123a568cf50a82d33b282b99adfa81ec9f826d85
-
Size
1.6MB
-
MD5
99777cb685e2b3593e58bf0fda50f265
-
SHA1
ec8b7326233204344abbf644460cf65fdc1af691
-
SHA256
2118fc073dafd7cf7cf297e7123a568cf50a82d33b282b99adfa81ec9f826d85
-
SHA512
a741f5bd26455aa7281ac4ac121a314847f955f31c92ecb7aa2dc357d4bdbbab7dbd69898e8182f6ad827a555d854c32fe976ce5ec3fb2dad3b3418919ad4d66
-
SSDEEP
12288:xOuW5o/oStsb4CWKKCrZTGF/k8uMxtxPvvzgf1yyyEyyy8W:xjSow1bJbKkKF/eMNPjgFW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2118fc073dafd7cf7cf297e7123a568cf50a82d33b282b99adfa81ec9f826d85 unpack001/out.upx
Files
-
2118fc073dafd7cf7cf297e7123a568cf50a82d33b282b99adfa81ec9f826d85.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ